Want to read Slashdot from your mobile device? Point it at m.slashdot.org and keep reading!

 



Forgot your password?
typodupeerror

Comment Re: Where is that alleged "security hole"? (Score 2) 12

Working with glibc, uClibc-NG, and Google (gperftools and later on TCMalloc) was quite intensive. We hoped that musl and others will integrate it as well after they will see it was adopted by glibc and uClibc-NG. We will gladly help them integrate it if they need any assistance.

Comment Re: Where is that alleged "security hole"? (Score 5, Informative) 12

Sorry, I can't control what the media writes about my research. Safe-Linking aims to solve a non-robust design in malloc (ptmalloc/dlmalloc/tcmalloc). Calling it a vulnerability is a bit bombastic. Attackers were focusing their exploits on single-linked lists (fastbins, tcache) once they had an initial heap-based buffer overflow. This protection protects the pointers of the list, forcing an attacker to need a leak before he could start his attack. More info in our technical blog: https://research.checkpoint.co...

Slashdot Top Deals

If all else fails, lower your standards.

Working...