3 ms·
The problem is really how you respond - a valid (from a security standpoint) response to invalid input is termination: it means that you can’t exploit it. In t
by olliej 5y ago
The problem is really how you respond - a valid (from a security standpoint) response to invalid input is termination: it means that you can’t exploit it.
In this case such a response would be inappropriate (I have know idea what the actual bug in the code was, whether it was deliberate or unintentional). Hell I’ve seen utf8 libraries that terminate on invalid input, so good luck using those :-/
- 0x0 5y agoDoesn't help if you're just terminating the springboard over and over, basically bootlooping the device
- olliej 5y agoBut at least it’s not a security bug \o/ At least that is the logic that occurs. I am not saying it’s good logic :) Honestly I feel the bigger bug is something going wrong in HomeKit taking out springboard.