Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

> The Linux kernel has thousands of engineers writing C code that runs as a single executable in a single address space. Memory corruption is not rampant, since they are careful to write good code, although it can still happen.

Sure, but I’ve rarely seen quality comparable to the Linux kernel in a commercial context.

> I am going to guess that Sony Ericsson had a ton of use after free bugs and array out of bounds bugs, as that is the main way that developers can step on each others' code when it shares a process space.

Mostly yes. But there were some interesting ones too. I debugged one that turned out to be a stack overflow, for example. There was basically this giant function with ridiculously many local variables. When that function called another function the stack pointer was bumped far out of the allotted stack space and the called function overwrote stuff when writing to local variables.



Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: