Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

oh bugs in the parsing libraries are the things MOSTLY used for attacks like this.

Parsing is hard, and parsers are buggy and lead to all kind of unsafe C code



Exactly, parsers are complicated, generally involve a lot of manipulation of memory buffers, and for performance reasons are usually written in a language without memory safety (though this is starting to change with languages like https://github.com/p-org/P and rust).




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: