4 ms·

Interesting that the winning submission exploits a known bug: https://github.com/rust-lang/rust/issues/38899 https://github.com/rust-lang/rust/issues/38899. Und

Interesting that the winning submission exploits a known bug: https://github.com/rust-lang/rust/issues/38899 https://github.com/rust-lang/rust/issues/38899. Underhanded C submissions don't need to exploit bugs; the C language already has plenty of loopholes!

dbaupp 9y ago
(That was one of the runners up, not the winning one.)
erickt 9y ago
Organizer here! Aidan actually submitted two entries. This particular entry that exploited this unsoundness bug wasn't actually the winner, even though it was great (horrible?). We weren't sure if the underhandedness would survive code review in this particular instance. He had to jump through some hoops [1] to trigger the unsoundness. His other entry blew us away. It took us a long time to figure out how it worked. [1]: https://github.com/rust-community/underhanded-submissions/blob/master/2016/aidanhs/submission2/submission/src/main.rs#L201 https://github.com/rust-community/underhanded-submissions/bl...
- richdougherty 9y ago
  Oops, thanks for the correction!
- moosingin3space 9y ago
  That other entry is probably the most creative exploit of a language package management ecosystem I've ever seen.