Phying News
P非影 中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Don’t recurse on untrusted input

blog.trailofbits.com | blog | #java | #vulnerability-disclosure | #codeql | #protobuf | #trail-of-bits | #dos | #recursion | #stack-overflow

Summary

We developed a simple CodeQL query to find denial-of-service (DoS) vulnerabilities in several high-profile Java projects.
Published
Collected

original ↗

Related coverage

  1. ProtoFuzz: A Protobuf Fuzzer (blog.trailofbits.com)
  2. 1Password's AI patching benchmark is misleading (blog.trailofbits.com)
  3. A “proof” of Fermat’s Last Theorem that fits the margin (blog.trailofbits.com)
  4. VMs won't contain cyber-capable agents (blog.trailofbits.com)
  5. State divergence enables unauthorized access (blog.trailofbits.com)
  6. A few notes on AWS Nitro Enclaves: KMS integration (blog.trailofbits.com)

back