Comment on Severity HIGH security problem to be announced with curl 8.4.0 on Oct 11 (CVE-2023-38545) · curl/curl · Discussion #12026

Black616Angel@feddit.de ⁨1⁩ ⁨year⁩ ago

• ultratiem@lemmy.ca ⁨1⁩ ⁨year⁩ ago

  Buffer overflows are like Lupus in House M.D.

  source

  • __init__@programming.dev ⁨1⁩ ⁨year⁩ ago

    It’s not overflow. It’s never overflow.

    source
• aoidenpa@lemmy.world ⁨1⁩ ⁨year⁩ ago

  Why don’t they just rewrite it in rust? It would be much safer right?

  source

  • unquietwiki@programming.dev ⁨1⁩ ⁨year⁩ ago

    I think that’s been asked before. That’d be a massive undertaking, and they also support architectures that I don’t think Rust does (yet).

    source
  • fil@programming.dev ⁨1⁩ ⁨year⁩ ago

    You can already use hyper (written in rust) for http stuff in curl aws.amazon.com/…/how-using-hyper-in-curl-can-help… I wonder if the vulnerability touches this use case as well

    source

    • aoidenpa@lemmy.world ⁨1⁩ ⁨year⁩ ago

      Perfect article for my question. Appreciated.

      source