Get the latest tech news
Torvalds Voices Thoughts On Linux Mitigating Unexpected Arithmetic Overflows/Underflows
For those interested in some insightful Linux kernel mailing list reading this weekend, there's been a vibrant discussion on the ability for the Linux kernel to mitigate unexpected arithmetic overflows/underflows/wraparounds.
Kees Cook with Google has been working on figuring out how to better deal with unexpected arithmetic overflow bugs within the Linux kernel's C source code. Kees initial thinking has been on pursuing sanitizer-based mitigations and concluded his mailing list thread with:"I'm seeking some general consensus on taking approach #1 above. Any solution that actually gains us meaningful coverage is going to require pretty extensive changes to Linux's types so that's a universal pain point.
Or read this on Phoronix