Copy Fail 2: Electric Boogaloo (opens in new tab)

(github.com)

11 pointslarusso17d ago2 comments

2 comments

Mindless211217d ago

How much pain must there be until people realize we actually do need memory safety?

delamon17d ago

How would've memory safety helped here?

Mindless211217d ago

In CHERI, for example, pointers have permissions. The pointer to the COW memory would not have the "write" permission.

I could be misunderstanding the bug, of course.

delamon17d ago

If you "forget" to mark COW memory pointer as no-write, the net effect would be same, would it not? If I'm reading the diff correctly, the problem was that code missed to mark some pages as shared (aka no-write).

1 more reply

tatersolid17d ago

Because “Page-cache write into any readable file” is a memory safety bug? All of these recent Linux LPEs are memory safety issues.

j / k navigate · click thread line to collapse

2 comments

Mindless211217d ago

How much pain must there be until people realize we actually do need memory safety?

delamon17d ago

How would've memory safety helped here?

Mindless211217d ago

In CHERI, for example, pointers have permissions. The pointer to the COW memory would not have the "write" permission.

I could be misunderstanding the bug, of course.

delamon17d ago

1 more reply

tatersolid17d ago

Because “Page-cache write into any readable file” is a memory safety bug? All of these recent Linux LPEs are memory safety issues.

j / k navigate · click thread line to collapse