5 ms·

This sort of thing blows my mind. Any rough theories on how this sort of thing can happen? How can an app go from parsing metadata to executing foreign code?

• rossjudson 7y ago
  It's called C. It's incredibly hard to write secure code in it.
  • earenndil 7y ago
    I thought whatsapp was erlang?
    • hooch 7y ago
      I don’t imagine there being much Erlang in the iOS and Android clients.
  • ghostpepper 7y ago
    Is there any C in WhatsApp?
    • londons_explore 7y ago
      Yes - all the media decoders are in C
      • ghostpepper 7y ago
        Cool, that actually does sound like a rather large attack surface for an innocent-looking attachment to wind up executing code