Head's up!
-
RE: https://kolektiva.social/@Anarcat/117479816537748344
Head's up! #PHP patch #8512 may still be exploitable. #infosec
-
RE: https://kolektiva.social/@Anarcat/117479816537748344
Head's up! #PHP patch #8512 may still be exploitable. #infosec
-
@junes holy mother of code bombs...all the C. oh dear.
-
@junes holy mother of code bombs...all the C. oh dear.
@MissConstrue i'm not an expert, do you mean this is something that affects all or most programs, tools, languages that were written in C?
-
@MissConstrue i'm not an expert, do you mean this is something that affects all or most programs, tools, languages that were written in C?
@junes No, just where it interacts with php or the lamp stack. But that could be millions of lines of code. (Again, based on the link you sent...I haven't gotten elbows deep yet, I'm still sorting ducks.)
-
@junes No, just where it interacts with php or the lamp stack. But that could be millions of lines of code. (Again, based on the link you sent...I haven't gotten elbows deep yet, I'm still sorting ducks.)
@MissConstrue ok, but do you know if this[*] is common practice in programs written in C?
[*] https://social.noyu.me/@hikari/statuses/01M5FKSAZR531Y1PG1HHBCJ4YJ -> «PHP is a million or so lines of C code that pervasively used alloc functions that longjmp() on failure, so OOM bailout creates corrupted state. the fix uses fallible allocs and a global please-return-early OOM flag but requires touching Everything. completeness is impossible»
-
A alf149@social.data.coop shared this topic
