3 ms·
Do note that the "single out of bound NULL byte" vulnerability has famously caught people off-guard in the past due to it being unexpectedly exploitable =) htt
by tux3 6y ago
Do note that the "single out of bound NULL byte" vulnerability has famously caught people off-guard in the past due to it being unexpectedly exploitable =)
https://googleprojectzero.blogspot.com/2014/08/the-poisoned-nul-byte-2014-edition.html https://googleprojectzero.blogspot.com/2014/08/the-poisoned-...
Those kind of exploits are thankfully getting harder with the many layers of mitigations we have today, but trying to predict which memory bug will or will not be exploitable is a very unintuitive and inadvisable exercise.