Gnash, Lightspark, and Shumway
Posted Nov 25, 2012 10:01 UTC (Sun) by khim
In reply to: Gnash, Lightspark, and Shumway
Parent article: Gnash, Lightspark, and Shumway
Undefined behavior is a problem, yes, but JS and PHP have it's own answer to his problem: non-transitive comparisons. Practically speaking these produce similar number of vulnerabilities (well, PHP has SQL-injections which, of course dwarf both C and JS problems, but we are not comparing PHP and C, but JS and C).
to post comments)