4 ms·
iOS 7.1.x PDF exploit – CVE-2014-4377
- th0br0 12y agohttp://blog.binamuse.com/2014/09/coregraphics-memory-corruption.html http://blog.binamuse.com/2014/09/coregraphics-memory-corrupt...
- allegory 12y agoConfucius say "man who write C have many holes in pants" That's what our lead C dev says. And I agree, as a C programmer.
- walterbell 12y agoYesterday's thread with exploit code, enables any website to perform arbitrary code execution. Apple needs to fix this in iOS7, not force users to upgrade to iOS8 while it is still buggy. https://news.ycombinator.com/item?id=8348843 https://news.ycombinator.com/item?id=8348843
- clarry 12y agoAlways check your arithmetic, always check your arithmetic, always check your arithmetic... No, let's just keep repeating old classic bugs. OpenBSD's reallocarray(3) is a step in the right direction, but I've always been concerned about the focus on multiplication; needing to allocate x*y+z bytes is a rather common pattern. I suspect there's still plenty of additive arithmetic that goes unchecked.
- cportela 12y agoThe repo with the code in it. Link to the original post already posted, but here it is anyways. https://github.com/feliam/CVE-2014-4377 https://github.com/feliam/CVE-2014-4377 http://blog.binamuse.com/2014/09/coregraphics-memory-corruption.html http://blog.binamuse.com/2014/09/coregraphics-memory-corrupt...