4 ms·
Crashes are exploitable in many more cases than you'd think, buffer overflows are a minority of them in browsers now.
by fulafel 6y ago
Crashes are exploitable in many more cases than you'd think, buffer overflows are a minority of them in browsers now.
- MaxBarraclough 6y agoA relevant snippet from the Chromium project [0] > Around 70% of our high severity security bugs are memory unsafety problems (that is, mistakes with C/C++ pointers). Half of those are use-after-free bugs. https://www.chromium.org/Home/chromium-security/memory-safety https://www.chromium.org/Home/chromium-security/memory-safet...
- flakiness 6y agoThat is right. Note that there are many panic-like intentional crashes caused by various safeguards.