Comment on CrowdStrike downtime apparently caused by update that replaced a file with 42kb of zeroes

<- View Parent
Morphit@feddit.uk ⁨3⁩ ⁨months⁩ ago

I don’t think the kernel could continue like that. The driver runs in kernel mode and took a null pointer exception. The kernel can’t know how badly it’s been screwed by that, the only feasible option is to BSOD.

The driver itself is where the error handling should take place. First off it ought to have static checks to prove it can’t have trivial memory errors like this. Secondly, if a configuration file fails to load, it should make a determination about whether it’s safe to continue or halt the system to prevent a potential exploit. You know, instead of shitting its pants and letting Windows handle it.

source
Sort:hotnewtop