4 ms·
> Though this is contingent on arithmetic bugs in caller code elsewhere in the hypothetical program That was my point. The article claims to show how easy it i
by firebacon 7y ago
> Though this is contingent on arithmetic bugs in caller code elsewhere in the hypothetical program
That was my point. The article claims to show how easy it is to introduce such a bug in the second snippet, but that isn't true. You need to introduce more bugs to get a security vulnerability.