3 ms·
Is the regular version of sudo really riddled with memory safety concerns? Historically there have been few and far between security vulnerabilities. I’m not c
by KMnO4 3y ago
Is the regular version of sudo really riddled with memory safety concerns? Historically there have been few and far between security vulnerabilities.
I’m not convinced that rewriting something in rust makes it automatically safer.
- nibbleshifter 3y agoAbout one decently exploitable bug a year or so over the past few years. Not all of them have been memory safety issues, but many have been.
- Tobu 3y agohttps://www.cvedetails.com/vulnerability-search.php?f=1&product=sudo https://www.cvedetails.com/vulnerability-search.php?f=1&prod... finds quite a few: double free, array out of bounds, buffer overflows in the stack and the heap… There's also a format string vulnerability that wouldn't exist in Rust and which C turns into privilege escalation instead of aborting.