3 ms·
> Obviously the system wasn't very robust, as a simple, within specs change could break it. From my limited understanding, the file was corrupted in some way.
by Izkata 2y ago
> Obviously the system wasn't very robust, as a simple, within specs change could break it.
From my limited understanding, the file was corrupted in some way. Lots of NULL bytes, something like that.
- GuB-42 2y agoFrom the report, it seems the problem is that they added a feature that could use 21 arguments, but there was only enough space for 20. Until now, no configuration used all 21 (the last one was a wildcard regex, which apparently didn't count), but when they finally did, it caused a buffer overflow and crashed.
- acdha 2y agoThat rumor floated around Twitter but the company quickly disavowed it. The problem was that they added an extra parameter to a common function but never tested it with a non-wildcard value, revealing a gap in their code coverage review: https://www.crowdstrike.com/wp-content/uploads/2024/08/Channel-File-291-Incident-Root-Cause-Analysis-08.06.2024.pdf https://www.crowdstrike.com/wp-content/uploads/2024/08/Chann...