Collaborate Disseminate
ASLR allows to randomize the base address of userspace applications. In Linux, the length of the randomized part of the mmap address can be specified via the kernel build config. It is bound by the minimum and maximum values of the respect… Continue reading Downsides of increased ASLR entropy
Here, in an admittedly discursive nutshell, is the fascinating story of CVE-2023-32784. (Short version: Don’t panic.) Continue reading Serious Security: That KeePass “master password crack”, and what we can learn from it
The classic malloc overflow, of overwriting pointers in a free chunk, to cause free() unlink to overwrite an arbitrary location with an arbitrary value, is no longer possible with modern glibc (although, other, more complicated attacks are… Continue reading How does glibc prevent malloc unlink exploits?
Dangling pointer(heap)
Use After Free(heap)
Double Free(heap)
Off by one(stack)
Integer Overflow(stack)
Unused Variable(stack and heap)
underrun(stack and heap)
race condition(stack and heap)
From what I’ve seen unused variable and under… Continue reading What are some exploitable memory corruption attacks I have not listed?
I’ve got information security as high as possible with my Flutter app so far with encryption and proper storage for data at rest as well as data in transit. With this question I’m only aiming for protecting data at rest.
If I did something… Continue reading Would this way of going about protecting users’ data in use be secure, or overkill?
Is there a problem to use reflection (specifically class.forName) in server side application?
My main thread about this is someone to inject a code dumping memory in JVM and adding commands in reference memory field, but this is unlike in … Continue reading Dyanamic class load for server side application
I don’t understand the difference between "confinement" and "bounds" in programming. I always understood these two to be the same thing.
Could someone explain:
What are they?
What is the difference between these two?
… Continue reading What is Confinement and Bounds in programming?
We are designing a Python application and we need to "load" encryption secret key in "memory" at the application boot.
It can be also an admin pin code. Anyway, just some data.
Our application will run under docker cont… Continue reading Secure memory buffer
I have an interview where I am expecting to have to review some vulnerable C code and point out the vulnerability(s). I am by no means a C developer, but I do know that the common vulnerabilities are primarily related to how developers man… Continue reading C Security Code Review
CVE-2009-5030
OpenJPEG: Heap memory corruption leading to invalid free
The tcd_free_encode function in tcd.c in OpenJPEG 1.3 through 1.5
allows remote attackers to cause a denial of service (memory
corruption) and po… Continue reading What are the security implications of invalid free()?