4 ms·
I don't use tmux. CVE-2020-27347 is exactly the kind of memory safety bug exploitable by terminal output that I was talking about.
by remram 1y ago
I don't use tmux.
CVE-2020-27347 is exactly the kind of memory safety bug exploitable by terminal output that I was talking about.
- hnlmorg 1y agoI’m not going to deny that memory safety bugs are completely avoidable in C. However if the best example in tmux you can find is a bug that was patched promptly 5 years ago. That that’s does also say something favourable about tmux as well. As I said elsewhere, if memory safety is a major concern then there are Rust multiplexers too. But there’s plenty more lower hanging fruit to worry about before tmux.