4 ms·
If you're going to validate user input, you first need to get it into kernel space, which requires allocating memory for it. User input is not limited to 4 GB.
by scott_s 12y ago
If you're going to validate user input, you first need to get it into kernel space, which requires allocating memory for it.
User input is not limited to 4 GB. Users can provide whatever they want; that's the point. You have to code for malicious users who are pushing your system towards its edge cases, trying to find holes to break through.
- foxhill 12y ago> If you're going to validate user input, you first need to get it into kernel space, which requires allocating memory for it. i don't buy this - if you are going to allocate space, you must know the size of the space you are allocating. which you can validate, and certainly does not require going into kernel space to do.