Name: Anonymous 2017-05-24 10:23
http://blog.checkpoint.com/2017/05/23/hacked-in-translation/
Was this brought on us by using media players made in C?
Was this brought on us by using media players made in C?
cat turn into ENTERPRISE QUALITY bloatstrosities that are larger and yet less general and useful than their predecessors. There's no need to "validate" any input.
#include <stdio.h>
int main(void)
{
/*
* buf is initialized to an array of 32 zero bytes, and since the
* fread call will read in at most 31 bytes into buf, the resulting
* string is guaranteed to be nul-terminated.
*/
char buf[32] = {0};
fread(buf, 1, 31, stdin);
printf("You said %s!\n", buf);
return(0);
}
To date, we tested and found vulnerabilities in four of the most prominent media players: VLC, Kodi, Popcorn Time and StremioHoly shit who uses any of those? Why does this matter?
Holy shit who uses any of those? Why does this matter?Millions of people use those. They're the most popular, after all.
can someone let me know if there is a reason for me to switch away from MPC-HC+MadVR?Not using Windows.
That's not an issue with my program, it's an issue with the shell/terminal.
On the first aspect, Merkel mentions the use of the C programming language as one risk factor which favored Heartbleed's appearance, echoing Wheeler's analysis
