Phying News
P非影 中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Compiler bug causes compiler bug: how a 12-year-old g++ bug took down Solidity

osec.io | blog | #cpp | #compiler | #solidity | #gcc | #solc | #boost

Summary

OtterSec explains how a 12-year-old G++ overload-resolution bug, C++20 comparison rewrites and legacy Boost code crash Solidity's compiler (solc) on valid code — and how to fix it.
Published
Collected

original ↗

Related coverage

  1. Breaking the Solidity Compiler with a Fuzzer (blog.trailofbits.com)
  2. Solidity compilers: memory safety (osec.io)
  3. LLVM's 'RFC: C++ Buffer Hardening' at Google (bughunters.google.com)
  4. Sanitize your C++ containers: ASan annotations step-by-step (blog.trailofbits.com)
  5. Typos that omit security features and how to test for them (blog.trailofbits.com)
  6. A Year in the Life of a Compiler Fuzzing Campaign (blog.trailofbits.com)

back