3 ms·

Would you give some examples of some exploits which you feel weren't exploiting amateur mistakes?

• meowface 13y ago
  http://www.exploit-db.com/exploits/28974/ http://www.exploit-db.com/exploits/28974/ Here's one. A use-after-free triggered due to some faulty logic. Mistake? Yes. Amateur mistake? No. Even very experienced C/C++ programmers, such as Microsoft's top devs, may accidentally double-free, or use already-free memory.
  • HairyFotr 13y ago
    Don't static analyzers catch a lot of these bugs these days? (if one can be bothered to configure and use them)
    • wglb 13y ago
      And wade through a forest of false positives.
    • meowface 13y ago
      They do. And I imagine Microsoft employs static analyzers very frequently. They can't always catch everything, though.