4 ms·
Organizer here! Aidan actually submitted two entries. This particular entry that exploited this unsoundness bug wasn't actually the winner, even though it was
by erickt 9y ago
Organizer here!
Aidan actually submitted two entries. This particular entry that exploited this unsoundness bug wasn't actually the winner, even though it was great (horrible?). We weren't sure if the underhandedness would survive code review in this particular instance. He had to jump through some hoops [1] to trigger the unsoundness.
His other entry blew us away. It took us a long time to figure out how it worked.
[1]: https://github.com/rust-community/underhanded-submissions/blob/master/2016/aidanhs/submission2/submission/src/main.rs#L201 https://github.com/rust-community/underhanded-submissions/bl...
- richdougherty 9y agoOops, thanks for the correction!
- moosingin3space 9y agoThat other entry is probably the most creative exploit of a language package management ecosystem I've ever seen.