20 ms·

Aren't these making it past BlastDoor, written in Swift?

• Pulcinella 5y ago
  Swift has e.g. UnsafePointer if you want to work more directly with memory. Presumably if BlastDoor uses them to work directly with memory then it could still be vulnerable, though I am not sure because I am not very familiar with them. If I was excited about pointers I wouldn't be using Swift...
  • saagarjha 5y ago
    It is highly unlikely BlastDoor is using much of those, except when interacting with system frameworks.
• vlozko 5y ago
  The exploit targets existing C code that did image decoding and used CoreFoundation to handle data reads. Blast door is Swift-based and likely very memory-safe. What I’m curious about is where the limits of BlastDoor are that it couldn’t contain this particular attack. I’m under the impression that BlastDoor was built exactly for this type of attack.