4 ms·
BlackBerry resisted announcing major flaw in QNX operating system
- compressedgas 5y agoThe BadAlloc issue [1] [2] is that calloc [3] can return a pointer to a smaller than requested allocation when it should have returned NULL when given arguments those values result in an undetected internal overflow. [1]: https://us-cert.cisa.gov/ncas/alerts/aa21-229a https://us-cert.cisa.gov/ncas/alerts/aa21-229a [2]: https://msrc-blog.microsoft.com/2021/04/29/badalloc-memory-allocation-vulnerabilities-could-affect-wide-range-of-iot-and-ot-devices-in-industrial-medical-and-enterprise-networks/ https://msrc-blog.microsoft.com/2021/04/29/badalloc-memory-a... [3]: https://pubs.opengroup.org/onlinepubs/9699919799/functions/calloc.html https://pubs.opengroup.org/onlinepubs/9699919799/functions/c...