3 ms·
2026 and we still have bugs from copying unbounded user input into fixed size stack buffers in security critical code. Oh well, maybe we'll fix it in the next 3
by chc4 8mo ago
2026 and we still have bugs from copying unbounded user input into fixed size stack buffers in security critical code. Oh well, maybe we'll fix it in the next 30 years instead.
- rvz 8mo ago2026 and why not vibe code our own cryptography library just like we are vibing lots of sandbox solutions? /s
- pixl97 8mo agoIt's 2023, why not use Rustls. It's 2014, why not use LibreSSL. You don't have to bring up AI, everyone just needs to leave OpenSSL to die.
- TacticalCoder 8mo ago> 2026 and why not vibe code our own cryptography library just like we are vibing lots of sandbox solutions? /s And make sure to make it a hybrid of PHP and JavaScript /s
- nly 8mo agoThe bug isn't actually the copy but the bounds check. If you had a dynamically sized heap allocated buffer as the destination you'd still have a denial of service attack, no matter what language was used.
- JohnLeitch 8mo agoAssuming you're talking about a heap buffer overrun, it's still possible to exploit for EoP in some cases.
- nly 8mo agoNo, I mean you'd just allocate a tonne of memory
- JohnLeitch 8mo agoAh, okay. Thought you were talking about OOB heap write or something.
- deleted 8mo ago[deleted]
- tialaramex 8mo agoThe actual vulnerability is indeed the copy. What we used to do is this: 1. Find out how big this data is, we tell the ASN.1 code how big it's allowed to be, but since we're not storing it anywhere those tests don't matter 2. Check we found at least some data, zero isn't OK, failure isn't OK, but too big is fine 3. Copy the too big data onto a local buffer The API design is typical of C and has the effect of encouraging this mistake int ossl_asn1_type_get_octetstring_int(const ASN1_TYPE *a, long *num, unsigned char *data, int max_len) That "int" we're returning is either -1 or the claimed length of the ASN.1 data without regard to how long that is or whether it makes sense. This encourages people to either forget the return value entirely (it's just some integer, who cares, in the happy path this works) or check it for -1 which indicates some fatal ASN.1 layer problem, give up, but ignore other values. If the thing you got back from your function was a Result type you'd know that this wasn't OK, because it isn't OK. But the "Eh, everything is an integer" model popular in C discourages such sensible choices because they were harder to implement decades ago.
- magicalhippo 8mo agoWin32 API at some point started using the convention of having the buffer length be a reference. If the buffer is too small the API function updates the reference with the required buffer length and returns an error code. I quite like that, within the confines of C. I prefer the caller be responsible for allocations, and this makes it harder to mess up.
- wat10000 8mo agoA denial of service attack is a million times better than an RCE attack.
- pjmlp 8mo agoI recall Hoare, "A consequence of this principle is that every occurrence of every subscript of every subscripted variable was on every occasion checked at run time against both the upper and the lower declared bounds of the array. Many years later we asked our customers whether they wished us to provide an option to switch off these checks in the interests of efficiency on production runs. Unanimously, they urged us not to they already knew how frequently subscript errors occur on production runs where failure to detect them could be disastrous. I note with fear and horror that even in 1980 language designers and users have not learned this lesson. In any respectable branch of engineering, failure to observe such elementary precautions would have long been against the law." -- C.A.R Hoare's "The 1980 ACM Turing Award Lecture" Guess what 1980's language he is referring to. Then in 1988, https://en.wikipedia.org/wiki/Morris_worm https://en.wikipedia.org/wiki/Morris_worm It has been 46 years since the speech, and 38 since the Morris worm. How many related improvements have been tackled by WG14?
- seg_lol 8mo agoHumans are horribly unserious, yet extremely unfunny at the same time. What gives?
- pseudohadamard 8mo agoI particularly like the FIPS bit: >The FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this issue, as the CMS implementation is outside the OpenSSL FIPS module boundary. "I hereby define the vulnerability to be outside the bit that I define to be secure, therefore we're not vulnerable".