|
|
Subscribe / Log in / New account

I'm having difficulty understanding

I'm having difficulty understanding

Posted Jul 3, 2019 18:01 UTC (Wed) by NYKevin (subscriber, #129325)
In reply to: I'm having difficulty understanding by thestinger
Parent article: OpenPGP certificate flooding

If it is dereferencing NULL pointers, might it also be dereferencing non-NULL but invalid pointers? If so, there's probably an RCE vuln in there somewhere... I wonder how long it would take a determined nation-state attacker to backdoor everyone's boxes with booby-trapped keys?


to post comments

I'm having difficulty understanding

Posted Jul 3, 2019 18:32 UTC (Wed) by dd9jn (✭ supporter ✭, #4459) [Link]

Derefing a NULL-ptr happens far more often than derefing an invalid pointer. This is the reason why practically all platforms do not map the page with address 0x0. For example

if (!a)
die ("something is wrong with %s\n", a->name);

is an obvious bug in the diagnostic but no real harm is done. Needs to be fixed of course.


Copyright © 2025, Eklektix, Inc.
Comments and public postings are copyrighted by their creators.
Linux is a registered trademark of Linus Torvalds