Difference between revisions of "Talk:Signing bug"
Jump to navigation
Jump to search
(New section: That's it?) |
(yup.) |
||
| Line 6: | Line 6: | ||
That's the big singing bug? Some genius used strncmp instead of memcmp to compare binary data? ROFL. [[User:198.166.12.229|198.166.12.229]] 11:41, 27 March 2008 (PDT) | That's the big singing bug? Some genius used strncmp instead of memcmp to compare binary data? ROFL. [[User:198.166.12.229|198.166.12.229]] 11:41, 27 March 2008 (PDT) | ||
| + | : I'm afraid so. Also, they didn't bother checking any of the padding, either -- which would have at least made it much more difficult to exploit. [[User:Bushing|Bushing]] 14:00, 27 March 2008 (PDT) | ||
Revision as of 23:00, 27 March 2008
"NULL" should be spelled "NUL" in this context. "NULL" in C refers to a special pointer value, while "NUL" is a zero ASCII character value.
- NULL is OK http://en.wikipedia.org/wiki/Null_character --Pepsiman 09:55, 26 March 2008 (PDT)
That's it?
That's the big singing bug? Some genius used strncmp instead of memcmp to compare binary data? ROFL. 198.166.12.229 11:41, 27 March 2008 (PDT)
- I'm afraid so. Also, they didn't bother checking any of the padding, either -- which would have at least made it much more difficult to exploit. Bushing 14:00, 27 March 2008 (PDT)