Re: Public disclosure of discovered vulnerabilities
Available news archives: comp.lang.tcl - comp.lang.python - comp.security.firewalls - sci.crypt - comp.lang.php - comp.lang.javascript
Google
 
Web news.hping.org


sci.crypt archive

Re: Public disclosure of discovered vulnerabilities

From: Andrew Reilly <andrew-newspost@areilly.bpc-users.org>
Date: Thu May 26 2005 - 02:35:44 CEST

On Wed, 25 May 2005 01:32:36 +0000, Bryan Olson wrote:
> A stray pointer
> anywhere in the process can reach into objects of the array
> class and change them to an invalid state, such that they
> subsequently index out of bounds. Modern languages with strong
> type systems do not allow such things to happen.

That (the ability to access any (mapped) memory address) is a
characteristic of the hardware on which most compiled programs run.
Modern languages don't help you whenever your pointers get handed to you
by external modules or corrupted by hardware failures.

That sounds like a perfect place for the segment descriptor/capability
machine fans to leap back into the fray :-) Have at it...

-- 
Andrew
Received on Thu Sep 29 21:38:44 2005