3 ms·
changing the code by one character making it have an int overflow would have been more elegant.... no and the reason I even bring this point up is in early days
by jijji 3y ago
changing the code by one character making it have an int overflow would have been more elegant.... no and the reason I even bring this point up is in early days of hacking into developers machines sometimes you find unpublished integer overflow exploits...
- mcpherrinm 3y agoMaybe, but xz wasn’t parsing any input in the SSH use-case so that wouldn’t have resulted in an SSH backdoor.