4 ms·
How do they find exploits like this? Do they check every single kernel functions for unchecked pointers? Do they have some automated way to discover this?
by laurent123456 12y ago
How do they find exploits like this? Do they check every single kernel functions for unchecked pointers? Do they have some automated way to discover this?
- gldalmaso 12y agoOn figure 4 the legend says that static code analysis made it possible to discover the chain of calls.
- pbhjpbhj 12y agoHow many billions are MS making from Windows? Why aren't they doing that static analysis??
- ToastyMallows 12y agoMaybe they are and this was already documented internally, but potentially marked as a low threat, but now that it was found outside of Microsoft it's a bigger problem? I'm just spitballing here, one would have to assume that Microsoft is doing static code analysis.
- pbhjpbhj 12y agoOK, but it wasn't found before the current OS cycle presumably because one would imagine they'd fix it ... ha-ha! So it either wasn't found or they found it and continued to bake it in to the OS nonetheless. Which is better?