Sujet : Re: VMS
De : invalid (at) *nospam* invalid.invalid (Richard Kettlewell)
Groupes : comp.os.linux.miscDate : 21. Jun 2025, 08:45:38
Autres entêtes
Organisation : terraraq NNTP server
Message-ID : <wwv8qlla671.fsf@LkoBDZeT.terraraq.uk>
References : 1 2 3 4 5 6 7 8 9 10
User-Agent : Gnus/5.13 (Gnus v5.13) Emacs/28.2 (gnu/linux)
The Natural Philosopher <
tnp@invalid.invalid> writes:
On 20/06/2025 05:43, c186282 wrote:
The software industry has been trying this for decades now. It does
not work.
At some point, soon, they need to start flagging
the unsafe functions as ERRORS, not just WARNINGS.
>
The problem is that C was designed by two smart people to run on small
hardware for use by other smart people.
Well, maybe, but the original Unix team still ended up with buffer
overruns in their code. There’s a famous one in V7 mkdir, which ran with
elevated privileged due to the inadequate kernel API. I’ve not tried to
exploit it but it’s a pretty straightforward array overrun so almost
certainly exploitable to escalate from a mortal user to root.
-- https://www.greenend.org.uk/rjk/
Re: VMS
Re: VMS