oss-sec mailing list archives
Re: Aftershock
From: Chet Ramey <chet.ramey () case edu>
Date: Thu, 09 Oct 2014 20:10:19 -0400
On 10/8/14, 2:37 PM, mancha wrote:
Maybe LoC is a poor metric but I don't want that to obscure the real message: the process's high dynamism post-disclosure. As you correctly point out, many recent parser flaws don't rise to the level of security concerns primarily because of the prefix/suffix barrier. However, it's important to point out that critical piece of hardening was a post-disclosure innovation and, more importantly, was triggered by post-disclosure findings and interaction.
I absolutely agree, and think it's equally important to point out that Florian came up with it, not me. There were other suggestions, some maybe better, but that was the one we coalesced around. Chet -- ``The lyf so short, the craft so long to lerne.'' - Chaucer ``Ars longa, vita brevis'' - Hippocrates Chet Ramey, ITS, CWRU chet () case edu http://cnswww.cns.cwru.edu/~chet/
Current thread:
- RE: Shellshocker - Repository of "Shellshock" Proof of Concept Code, (continued)
- RE: Shellshocker - Repository of "Shellshock" Proof of Concept Code Sona Sarmadi (Oct 05)
- Re: Shellshocker - Repository of "Shellshock" Proof of Concept Code Kurt Seifried (Oct 05)
- RE: Shellshocker - Repository of "Shellshock" Proof of Concept Code Sona Sarmadi (Oct 06)
- Re: Shellshocker - Repository of "Shellshock" Proof of Concept Code Solar Designer (Oct 06)
- Re: Shellshocker - Repository of "Shellshock" Proof of Concept Code mancha (Oct 06)
- Re: Shellshocker - Repository of "Shellshock" Proof of Concept Code Solar Designer (Oct 07)
- Re: Shellshocker - Repository of "Shellshock" Proof of Concept Code mancha (Oct 07)
- Re: Shellshocker - Repository of "Shellshock" Proof of Concept Code Solar Designer (Oct 07)
- Re: Shellshocker - Repository of "Shellshock" Proof of Concept Code Chet Ramey (Oct 07)
- Re: Aftershock (was: Shellshocker - Repository of "Shellshock" Proof of Concept Code) mancha (Oct 08)
- Re: Aftershock Chet Ramey (Oct 09)
- RE: Shellshocker - Repository of "Shellshock" Proof of Concept Code Sona Sarmadi (Oct 07)