4 ms·
What about qmail? No one runs qmail and no one is writing new C with that kind of insanely hyperconservative style using only world-class security experts. And
by AlotOfReading 10mo ago
What about qmail? No one runs qmail and no one is writing new C with that kind of insanely hyperconservative style using only world-class security experts.
And it still wasn't enough. qmail has seen RCEs [0, 1] because DJB didn't consider integer and buffer overflows in-scope for the application.
[0] https://www.guninski.com/where_do_you_want_billg_to_go_today_4.html https://www.guninski.com/where_do_you_want_billg_to_go_today...
[1] https://lwn.net/Articles/820969/ https://lwn.net/Articles/820969/