TE
科技回声
首页24小时热榜最新最佳问答展示工作
GitHubTwitter
首页

科技回声

基于 Next.js 构建的科技新闻平台,提供全球科技新闻和讨论内容。

GitHubTwitter

首页

首页最新最佳问答展示工作

资源链接

HackerNews API原版 HackerNewsNext.js

© 2025 科技回声. 版权所有。

Heap Overflow in OpenBSD's Slaacd via Router Advertisement

55 点作者 gray_charger大约 3 年前

5 条评论

somat大约 3 年前
Wow! that&#x27;s a hardcore patch.<p>expectation: signed vs unsigned overflow... probably a one line diff.<p>openbsd: ehhh... do we really need dnssl? lets tear the whole thing out.<p><a href="https:&#x2F;&#x2F;ftp.openbsd.org&#x2F;pub&#x2F;OpenBSD&#x2F;patches&#x2F;7.0&#x2F;common&#x2F;017_slaacd.patch.sig" rel="nofollow">https:&#x2F;&#x2F;ftp.openbsd.org&#x2F;pub&#x2F;OpenBSD&#x2F;patches&#x2F;7.0&#x2F;common&#x2F;017_s...</a><p>Honestly, I like their attitude when it comes to deleting code.
gjadi大约 3 年前
&gt; The OpenBSD team states that they consider that the vulnerability would be exploitable if there weren&#x27;t severe privilege separation and pledge involved.<p>Yay!
评论 #30795173 未加载
jms703大约 3 年前
I love the fast turnaround time from the report to the release of the patch.
jeffbee大约 3 年前
Function is such a mess. Even C++ would clean this right up, and then you&#x27;d actually be able to read it. I&#x27;m not even going to claim this is beautiful or flawless or whatever, but <i>to me</i> this kind of C++ is head and shoulders above the C code in the article in terms of readability.<p><a href="https:&#x2F;&#x2F;godbolt.org&#x2F;z&#x2F;Mfnxq15Ma" rel="nofollow">https:&#x2F;&#x2F;godbolt.org&#x2F;z&#x2F;Mfnxq15Ma</a>
评论 #30798142 未加载
评论 #30794335 未加载
_wldu大约 3 年前
I wonder if the OpenBSD team would be open to Go or Rust implementations?
评论 #30792396 未加载
评论 #30792334 未加载
评论 #30792563 未加载