3 ms·
Most of those security bugs have been found by using http://lcamtuf.coredump.cx/afl/ http://lcamtuf.coredump.cx/afl/ for fuzzing the config parser of NetHack.
by bhaak 7y ago
Most of those security bugs have been found by using http://lcamtuf.coredump.cx/afl/ http://lcamtuf.coredump.cx/afl/ for fuzzing the config parser of NetHack.
Also read the hilarious account how neglecting the integer range of parsing a number lead to a config that gives you an almost invincible character from the start:
https://dpmendenhall.blogspot.com/2020/03/nethack-366-or-how-to-glitch-nethack.html https://dpmendenhall.blogspot.com/2020/03/nethack-366-or-how...
- devit 7y agoThe C programming language strikes again.
- alxlaz 7y agoOne of the things I love about nethack is that these things effectively amount to magic. Arcane knowledge of how the (virtual) works underneath beneath that which is (virtually) physical allows you to manipulate the world in strange ways that seem logically impossible. Nethack developers are among the few who can claim that a bug is a feature and be half-serious about it :-).
- saagarjha 7y ago> First, I made the PIC global offset table (GOT) writable by disabling PIE on the link line (-no-pie). Wait, what?
- jl6 7y agoThe great thing about NetHack is that even a +127 cloak of magic resistance still won’t protect you from cockatrice stoning, disease from major demons, choking on food, drowning, nymphs stealing the cloak, poisoning, starvation, drawbridges, disintegration, brainlessness due to mind flayers, angry gods, or level drain. In short, there’s plenty of ways to die in NetHack!
- htfy96 7y agoAlso, be aware that today happens to be Friday the 13th, which will make your luck decrease by 1 and increases the difficulty a little bit ;p