3 ms·
A you're-holding-it-wrong that still got fixed in all the major C++ standard library implementations.
by bregma 3y ago
A you're-holding-it-wrong that still got fixed in all the major C++ standard library implementations.
- pests 3y agoFixed?
- bregma 3y agoCode was added to libc++ and libstdc++ to avoid the TOCTOU exploit documented in the CVE. "Fixed" in this case means the source code for the library was modified to prevent the documented exploit, and test cases were added to their test suites to exercise the code. Not sure about the Microsoft C++ standard library since the Microsoft Windows system API does not provide the same softlink functionalty.