Colin Percival personal blog

Tarsnap exploit bounty

Most bugs are straightforward, but occasionally one comes up which is not so clear in its impact. Such is the case with a bug which is fixed in tarsnap 1.0.36 . This bug causes the NUL string termination byte to overflow the heap-allocated buffer used for paths of objects examined as tarsnap traverses a directory…
Points
117
HN comments
53
Submissions
1
Cited by
0 commenters

Security & PrivacyTech Industry & Business2015

On Hacker News

SubmittedTitle on HNPointsComments
Aug 21, 2015Tarsnap exploit bounty by zdw11753

More from Colin Percival

All 60 posts →

Related posts from the same era