7 ms·
> Integer overflow isn't a security issue unless your program's memory safety depends on the correctness of the integer operation. That's simply not true and h
by IncRnd 4y ago
> Integer overflow isn't a security issue unless your program's memory safety depends on the correctness of the integer operation.
That's simply not true and has wide-reaching horrible effects that can occur. The wrong number of tickets can be purchased from a website, charging for less than were purchased. The DNR order can be put in place instead of SAVE LIFE. There are countless security issues that can occur.
Saying that integer overflow is only an issue for memory safety is really bad and incorrect advice.
- unshavedyak 4y agoThat's most logic issues though, is it not? I agree with you though, i wish Rust more commonly pushed "safer" (not in the UB way) code, like `Vec::get` and `u32::overflow_add` and etc. Luckily lints help to easily ban the arithmetic/etc ops from projects. Nevertheless i feel it should be a bit closer to Rust's home.
- deleted 4y ago[deleted]
- dcsommer 4y agoDo you have data on the relative frequency and severity of non-memory safety integer overflow security issues?
- hot_gril 4y agoI know at least about the DAO hack.
- IncRnd 4y agoHere are over 3k CVEs that contain "integer overflow". That shouldn't be considered a comprehensive search. https://cve.mitre.org/cgi-bin/cvekey.cgi?keyword=integer+overflow https://cve.mitre.org/cgi-bin/cvekey.cgi?keyword=integer+ove...
- hyperhopper 4y agoYou don't need to have to have historical stats to show that it can be a security issue.