3 ms·
Why are you so certain? The core of the exploit is an integer overflow issue: an attacker causes a 32-bit integer to overflow by repeated addition. Rust in rel
by kccqzy 5y ago
Why are you so certain? The core of the exploit is an integer overflow issue: an attacker causes a 32-bit integer to overflow by repeated addition.
Rust in release mode does not check for overflow on addition. Only debug mode Rust does that.
- pjmlp 5y agoThat was step one, it would then core dump on step two when trying to go over bounds. Naturally this could eventually be used in another way. There are no invicible fortesses, but some have enough defenses in place to keep almost everyone away or die trying, except the very resourceful ones.