3 ms·
buffer overflow is not the only way to get a RCE. String manipulation and 'eval' (which gives access to system APIs) is a common culprit
by gohrt 11y ago
buffer overflow is not the only way to get a RCE.
String manipulation and 'eval' (which gives access to system APIs) is a common culprit
- chc 11y agoIs anything like eval commonly used in Scala? That language is static as all get-out.
- deleted 11y ago[deleted]
- eropple 11y agoI've started seeing (and occasionally using) util-eval as a configuration language for Scala, but it's generally pretty rare.
- Dylan16807 11y agoUsing eval is gratuitous carelessness. At least a buffer overflow can be a mistake.