3 ms·

This isn't a buffer overflow; it's integer wraparound.

• flappysolutions 4y ago
  It is also an integer overflow :)
  • TeMPOraL 4y ago
    And if that integer is used as a bit buffer... :).
    • Hendrikto 4y ago
      … you still won‘t write outside the bounds of the integer, making this not a buffer overflow.
      • TeMPOraL 4y ago
        But you can overflow one bit into the carry flag, though :).
• jefftk 4y ago
  If you think of the integer as a buffer of size 31, containing an unsigned integer, the attack overflows into a different buffer of size 1, containing a sign bit for scaling that integer. ;) But yeah, integer overflow and not buffer overflow.