It rather involved being on the other side of this airtight hatchway: Producing malicious data in a kernel driver

A security vulnerability report went something like this: We have found a vulnerability in the LogXyz function. If the packet being logged contains malicious field lengths, the function can read past the end of the buffer and log data from its process space, The post It rather involved being on the other side of this airtight hatchway: Producing malicious data in a kernel driver appeared first on The Old New Thing....

Submit