4 ms·
> But if you transform the image into a format that doesn‘t have PNG’s complexity (in a low-privilege process, of course), the malicious nature of the PNG ‘shou
by oconnor663 7y ago
> But if you transform the image into a format that doesn‘t have PNG’s complexity (in a low-privilege process, of course), the malicious nature of the PNG ‘should’ be eliminated and then safe for parsing at a higher privilege level. Even if the attacker manages to compromise the low-privilege process with a malicious PNG, the high-privilege process will only parse the compromised process' output with a simple, plausibly-safe parser.
It's interesting to get a sense of how deeply unrealistic they think it is, to write a safe parser for a typical data format in an unsafe language.
- pjmlp 7y agoBecause as of 2019 the same errors as in early 1980's keep being repeated, regardless how many tools have been developed to tame C and it's derivatives. It is so unrealistic that Android is following up Solaris footsteps. Google has announced that ARM memory tagging extensions will be required in future Android versions.
- deleted 7y ago[deleted]
- mxcrossb 7y agoThe PSP was hacked by pirates when a bug was discovered in its image app (I think for tiff files). It makes me wonder if security should be baked in to a data format.
- zetafunction 7y agohttps://bugs.chromium.org/p/chromium/issues/list?q=Type%3DBug-Security%20jsonparser&can=1 https://bugs.chromium.org/p/chromium/issues/list?q=Type%3DBu... It's not clear that all these bugs can be turned into an attack, but that sure is a lot of bugs.