this has to be one of my all-time favorite bug-finding techniques: in your widely deployed software, at very low probability, you put a new heap allocation next to a protected page. performance is unaffected and the bugs that you find are those that actually matter to users in practice.
https://arxiv.org/pdf/2311.09394v2.pdf
John Regehr /
npub15x…e5a5k
2024-04-19 19:31:46
Author Public Key
npub15xjwk4qzx56p5tdsmzsge7m5ahztkp4nzmrmkw2cp324t888rwsswe5a5kPublished at
2024-04-19 19:31:46Event JSON
{
"id": "2f6b0c0578a08519206c2781dcbc7a4f8ac4a32536383395d52fae257c9d3df1",
"pubkey": "a1a4eb540235341a2db0d8a08cfb74edc4bb06b316c7bb39580c55559ce71ba1",
"created_at": 1713555106,
"kind": 1,
"tags": [
[
"proxy",
"https://mastodon.social/users/regehr/statuses/112299547430262545",
"activitypub"
]
],
"content": "this has to be one of my all-time favorite bug-finding techniques: in your widely deployed software, at very low probability, you put a new heap allocation next to a protected page. performance is unaffected and the bugs that you find are those that actually matter to users in practice.\n\nhttps://arxiv.org/pdf/2311.09394v2.pdf",
"sig": "e9ae0a2332c451c7904e89281da3e5c28c2b994f77d3f751aa85e1adb9412789430ab7c3f079a298d3f8a36816356a4bfa9262490d8b980fb4c2a6b2eee5ab02"
}