Comment

Comment by tptacek

Easy answer: the majority of exploitable memory corruption vulnerabilities in 2017 aren't simple buffer size calculation mistakes.

Pointer auth and control flow integrity techniques cover most (all?) memory corruption flaws, including memory lifecycle errors (which are probably the most common modern source of vulnerabilities). Built-in buffer bounds checks do not.

parent tptacek 9 years ago

Discussion

Live from the official Hacker News API

A modern reader for Hacker News · SvelteKit + Skeleton