3 ms·
Yes, in an ideal world your kernel shouldn't have any bugs. We don't live in an ideal world. Security engineering is the field of practical mitigations - given
by chc4 4y ago
Yes, in an ideal world your kernel shouldn't have any bugs. We don't live in an ideal world.
Security engineering is the field of practical mitigations - given that there are, in fact, null pointer dereferences in the kernel, mmap_min_addr and adding count limit to kernel oops provides defense in depth to help prevent them from being exploitable.
- chlorion 4y agoI don't think they are arguing that there should be no bugs. >Security engineering is the field of practical mitigations Somehow I've managed to use bounds checking in anything I create, and I'm not even an engineer, just a hobbyist!