Please create an account to participate in the Slashdot moderation system

 



Forgot your password?
typodupeerror

Comment Re: Where is that alleged "security hole"? (Score 2) 12

Working with glibc, uClibc-NG, and Google (gperftools and later on TCMalloc) was quite intensive. We hoped that musl and others will integrate it as well after they will see it was adopted by glibc and uClibc-NG. We will gladly help them integrate it if they need any assistance.

Comment Re: Where is that alleged "security hole"? (Score 5, Informative) 12

Sorry, I can't control what the media writes about my research. Safe-Linking aims to solve a non-robust design in malloc (ptmalloc/dlmalloc/tcmalloc). Calling it a vulnerability is a bit bombastic. Attackers were focusing their exploits on single-linked lists (fastbins, tcache) once they had an initial heap-based buffer overflow. This protection protects the pointers of the list, forcing an attacker to need a leak before he could start his attack. More info in our technical blog: https://research.checkpoint.co...

Slashdot Top Deals

Keep the number of passes in a compiler to a minimum. -- D. Gries

Working...