3 ms·
lack of fuzzing for their "parser + updater"
by pas 2y ago
lack of fuzzing for their "parser + updater"
- MBCook 2y agoPlus parsing unknown files (as in not validated to be properly formatted) in kernel space is just asking for a crash.
- pas 2y agoparsing is real validating! (obligatory "Parse, don't validate" post https://news.ycombinator.com/item?id=35053118 https://news.ycombinator.com/item?id=35053118 and some more discussion on the topic https://news.ycombinator.com/item?id=39322551 https://news.ycombinator.com/item?id=39322551 )