Full Disclosure mailing list archives

Re: [SE-2012-01] New Reflection API affected by a known 10+ years old attack

From: Florian Weimer <fw () deneb enyo de>
Date: Mon, 22 Jul 2013 23:56:26 +0200

* Georgi Guninski:

Can Coverity find logic bugs like missing checks?


Yes, some inconsistent cheks are reported.  Here's a public example
quoting some of the (textual) reporting:

<http://thread.gmane.org/gmane.comp.emulators.libvirt.cim/422/focus=423>

For real logic bugs, this will not work because hopefully, your logic
is far more concentrated and not spread all over the place.  (I think
this Coverity feature works only to ensure correct error threading, as
a poor man's substitute for exceptions.)

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

Current thread:

[SE-2012-01] New Reflection API affected by a known 10+ years old attack Security Explorations (Jul 17)
- Re: [SE-2012-01] New Reflection API affected by a known 10+ years old attack Jeffrey Walton (Jul 20)
  - Re: [SE-2012-01] New Reflection API affected by a known 10+ years old attack Bob iPhone Kim (Jul 20)
    - Re: [SE-2012-01] New Reflection API affected by a known 10+ years old attack Jeffrey Walton (Jul 20)
    - Re: [SE-2012-01] New Reflection API affected by a known 10+ years old attack Security Explorations (Jul 20)
  - Re: [SE-2012-01] New Reflection API affected by a known 10+ years old attack Georgi Guninski (Jul 22)
    - Re: [SE-2012-01] New Reflection API affected by a known 10+ years old attack Florian Weimer (Jul 22)
- <Possible follow-ups>
- Re: [SE-2012-01] New Reflection API affected by a known 10+ years old attack Michael Schierl (Jul 21)
  - Re: [SE-2012-01] New Reflection API affected by a known 10+ years old attack Security Explorations (Jul 20)