<![CDATA[Head's up!]]>RE: https://kolektiva.social/@Anarcat/117479816537748344

Head's up! patch #8512 may still be exploitable.

]]>https://forum.fedi.dk/topic/4083d0d7-90d0-4080-8427-bbe976e3853c/head-s-upRSS for NodeThu, 29 Oct 2026 03:21:21 GMTWed, 21 Oct 2026 16:33:37 GMT60<![CDATA[Reply to Head's up! on Wed, 21 Oct 2026 17:17:13 GMT]]>@MissConstrue ok, but do you know if this[*] is common practice in programs written in C?

[*] https://social.noyu.me/@hikari/statuses/01M5FKSAZR531Y1PG1HHBCJ4YJ -> «PHP is a million or so lines of C code that pervasively used alloc functions that longjmp() on failure, so OOM bailout creates corrupted state. the fix uses fallible allocs and a global please-return-early OOM flag but requires touching Everything. completeness is impossible»

]]>https://forum.fedi.dk/post/https://todon.nl/ap/users/116504000946206292/statuses/117480032399103539https://forum.fedi.dk/post/https://todon.nl/ap/users/116504000946206292/statuses/117480032399103539Wed, 21 Oct 2026 17:17:13 GMT<![CDATA[Reply to Head's up! on Wed, 21 Oct 2026 17:12:02 GMT]]>@junes No, just where it interacts with php or the lamp stack. But that could be millions of lines of code. (Again, based on the link you sent...I haven't gotten elbows deep yet, I'm still sorting ducks.)

]]>https://forum.fedi.dk/post/https://mefi.social/users/MissConstrue/statuses/117480012022209558https://forum.fedi.dk/post/https://mefi.social/users/MissConstrue/statuses/117480012022209558Wed, 21 Oct 2026 17:12:02 GMT<![CDATA[Reply to Head's up! on Wed, 21 Oct 2026 16:54:50 GMT]]>@MissConstrue i'm not an expert, do you mean this is something that affects all or most programs, tools, languages that were written in C?

]]>https://forum.fedi.dk/post/https://todon.nl/ap/users/116504000946206292/statuses/117479944386206834https://forum.fedi.dk/post/https://todon.nl/ap/users/116504000946206292/statuses/117479944386206834Wed, 21 Oct 2026 16:54:50 GMT<![CDATA[Reply to Head's up! on Wed, 21 Oct 2026 16:53:33 GMT]]>@junes holy mother of code bombs...all the C. oh dear.

]]>https://forum.fedi.dk/post/https://mefi.social/users/MissConstrue/statuses/117479939338285080https://forum.fedi.dk/post/https://mefi.social/users/MissConstrue/statuses/117479939338285080Wed, 21 Oct 2026 16:53:33 GMT<![CDATA[Reply to Head's up! on Wed, 21 Oct 2026 16:47:37 GMT]]>@MissConstrue also, https://social.noyu.me/@hikari/statuses/01M5FH01G5D6NQGAH8TA3TTD7H

]]>https://forum.fedi.dk/post/https://todon.nl/ap/users/116504000946206292/statuses/117479916010798538https://forum.fedi.dk/post/https://todon.nl/ap/users/116504000946206292/statuses/117479916010798538Wed, 21 Oct 2026 16:47:37 GMT