Phying News
Curated security research, vulnerabilities, advisories and tools for practitioners.

Rust, realloc, and references

Summary

OtterSec traces a subtle Solana SDK bug in AccountInfo::realloc — unchecked pointer math behind unsafe — explaining BPF loader ABI internals and how the audit uncovered it.
Published
Collected

original ↗

Related coverage

back