Recent Features
| |||||||||||||
Nonsense. This is trivial stuff.Nonsense. This is trivial stuff.Posted Jul 19, 2009 3:27 UTC (Sun) by gmaxwell (subscriber, #30048)In reply to: Nonsense. This is trivial stuff. by mikov Parent article: Linux 2.6.30 exploit posted
Eh, if I were betting I'd suggest that this was found by running a simple static analysis tool that warns you of the check after the dereference. Many will.
No fancy examination of the assembly was required to find a bug which justified analysis for exploitability. The exact compiler behaviour was only needed for the creation of the exploit, which is pretty usual, not the finding of the bug.
(Log in to post comments)
|
|||||||||||||