| |||||||||||||
Rooting your own phone: android securityRooting your own phone: android securityPosted Feb 10, 2009 4:26 UTC (Tue) by jamesh (guest, #1159)Parent article: Rooting your own phone: android security
A number of the bugs seem to rely on creating 2GB long strings or arrays. I wonder how exploitable that is in real life if your attack vector is just the software already on the device and java programs downloaded onto the device?
I doubt it'd let you malloc() such a large string, and do you have enough control to mmap() files to produce a string that large?
(Log in to post comments)
Rooting your own phone: android security Posted Feb 11, 2009 21:26 UTC (Wed) by ibukanov (subscriber, #3942) [Link]
> if your attack vector is just the software already on the device and java programs downloaded onto the device?
Any complex software has bugs. I would not be surprised if it would be easier to subvert a browser or JVM to execute arbitrary code than to get a root access from that code.
|
|||||||||||||