4 ms·
If they just didnt discard the OutOfBounds check, the V8 JS engine would be a lot safer...
by diamondo25 8y ago
If they just didnt discard the OutOfBounds check, the V8 JS engine would be a lot safer...
- userbinator 8y ago...and probably a lot slower. Google loves to make claims about V8's performance, but not so much about security.
- tokyodude 8y agocertainly V8 tries to be correct and this bug will be fixed. Chromium's position is "security in depth". They know it's impossible to have zero bugs therefore the entire architure assumes there will be bugs and tries to prevent them from causing any harm. This is also why there are roughly 10x less code execution bugs in chrome vs other browsers. same number of bugs overall but most lead nowhere
- blattimwind 8y ago> Chromium's position is "security in depth". Yet the exploit in WebSQL a few weeks ago gave RCE from a component directly reachable by page scripts.
- tom_ 8y agoThat must have been one of the bugs that lead somewhere.
- librarian42 8y agoTechnically that was an SQL injection attack. :)