4 ms·
It's hard for me to imagine how Unicode normalization could crash your application unless you have very convoluted memory management code. What on earth are yo
by torstenvl 3y ago
It's hard for me to imagine how Unicode normalization could crash your application unless you have very convoluted memory management code.
What on earth are you doing that it's leading to crashes? Are you not validating the result?
- hot_gril 3y agoiMessage has had several vulnerabilities related to this. Whatever the difficulties are, even Apple can't handle them sometimes.
- torstenvl 3y agoI'm very skeptical, but willing to be proven wrong. What's the CVE?
- hot_gril 3y agoFirst that comes to mind is the "effective power" one, https://nvd.nist.gov/vuln/detail/cve-2015-1157 https://nvd.nist.gov/vuln/detail/cve-2015-1157 There's also the "black dot" one, can't find the CVE though.
- torstenvl 3y agoThat seems like a truncation + display issue though, not a normalization issue. https://www.reddit.com/r/apple/comments/37e8c1/malicious_text_message/ https://www.reddit.com/r/apple/comments/37e8c1/malicious_tex... In fact, I don't know that there's any reason to believe normalization happens at all in the process of executing this.