HNGlance

Top Best New Show

Analysis of CVE-2013-0809 – Java integer overflow

http://axtaxt.wordpress.com/2013/07/06/analysis-of-cve-2013-0809/

by VMG • 13 years ago

70 4 13 years ago

AX

axtaxt.wordpress.com

Related Stories

Loading related stories...

Comments

4

Someone• 13 years ago

Minor correction: The size of the malloced area: (width height * 4) modulo 0xffffffff* is incorrect. The modulo is 2^32, not 2^32-1

unwind• 13 years ago

I noticed that too. The author is probably confusing the fact that you can compute the modulo for a power of two by bitwise-and:ing with (the power of two) - 1.

I.e. x & 0xffffffff == x % (0xffffffff + 1) (assuming more than 32 bits everywhere).

ExpiredLink• 13 years ago

OpenJDK, not "Java".

pjmlp• 13 years ago

Not only that, it is an exploit of the C code in the OpenJDK implementation.

People should stop mixing languages with implementations.

Source preview

axtaxt.wordpress.com

HNGlance

© 2024-2026 HN Glance. Story content belongs to its original sources.

Privacy
Terms