2 ms·
70% of bugs patched on Windows are memory bugs (buffer overflow, use after free, etc.), linked source below. If someone could make a fuzzer that actually finds
by mips_avatar 6y ago
70% of bugs patched on Windows are memory bugs (buffer overflow, use after free, etc.), linked source below. If someone could make a fuzzer that actually finds these, the nature of our constant security update world would change.
https://msrc-blog.microsoft.com/2019/07/16/a-proactive-approach-to-more-secure-code/ https://msrc-blog.microsoft.com/2019/07/16/a-proactive-appro...
- bonfire 6y agoI think the attack vectors in Windows are so so large that fuzzing to find everything is close to impossible (or even physically impossible). However there are bugs found by fuzzing that were disclosed in Windows - for example https://research.checkpoint.com/2020/bugs-on-the-windshield-fuzzing-the-windows-kernel/ https://research.checkpoint.com/2020/bugs-on-the-windshield-...