Alon Ben Tsur

331 posts

Alon Ben Tsur banner
Alon Ben Tsur

Alon Ben Tsur

@iamgweej

I must not `free(3)`. `free(3)` is the heap-killer. `free(3)` is the little-death that brings total obliteration.

man section 2 Katılım Ağustos 2019
464 Takip Edilen353 Takipçiler
Alon Ben Tsur
Alon Ben Tsur@iamgweej·
@TheGrandPew After we had a registration blunder last year I hoped we’d manage to get in this time, sad
English
0
0
1
446
Pew
Pew@TheGrandPew·
@iamgweej Registering was always a major struggle. Apparently trend micros email filtering systems r cursed
English
1
0
3
1K
Alon Ben Tsur
Alon Ben Tsur@iamgweej·
Seems like p2o is fucked this year eh
English
1
1
28
3.7K
Alon Ben Tsur
Alon Ben Tsur@iamgweej·
this is just untrue bro
Alon Ben Tsur tweet media
English
0
0
0
337
Alon Ben Tsur
Alon Ben Tsur@iamgweej·
I will not argue with idiots online for they are many and I am one
English
0
0
1
222
faulty *ptrrr
faulty *ptrrr@0x_shaq·
pwndbg is for ctf players. gef is for hackers. vanilla gdb is for that one person who sells exploits to the goverment from his basement.
English
16
22
395
21.5K
Alon Ben Tsur retweetledi
allisx86
allisx86@allisx86·
allisx86 tweet media
ZXX
10
168
3K
59.7K
Scott Bauer
Scott Bauer@ScottyBauer1·
@C2IRIS I mean USGOV coulda burned the bugs but they didn't.
English
2
0
1
519
Alon Ben Tsur
Alon Ben Tsur@iamgweej·
@itszn13 @OwariDa reading into the standard it seems an enum having a runtime value not specified in its definition is not UB, so the only UB happening here is really the missing return. TIL
English
0
0
1
64
itszn
itszn@itszn13·
@iamgweej @OwariDa I want to look into this a bit more but at least some testing on godbolt seems to show that adding the return to the function materializes a range check on the switch optimization Before and after adding a return after the switch:
itszn tweet mediaitszn tweet media
English
1
1
2
173
Alon Ben Tsur
Alon Ben Tsur@iamgweej·
@itszn13 @OwariDa I think the ub is from the enum typed variable getting an “unspecified” value - in my understanding the switch case function as written doesn’t constitute ub, (adding static enum members will make it ub, and -Werror code shouldn’t allow it to compile)
English
1
0
1
117
itszn
itszn@itszn13·
@iamgweej @OwariDa Well yes, extensible is what disabled range validation, but the ActionToKey is what created the undefined behavior (non-void function with no return) that causes the actual jump table bug I’m saying, having a function like that seems dangerous to keep around
English
1
0
2
134
itszn
itszn@itszn13·
@OwariDa I imagine not having a default case is so that they get warning when new enum members are added, but it seems like a slightly dangerous design pattern… I’m curious why they didn’t also fix the switch function to add a final return
English
1
0
9
1.1K
Pew
Pew@TheGrandPew·
age++
QST
10
0
39
2.9K
Alon Ben Tsur
Alon Ben Tsur@iamgweej·
I have a project including v8 (and some other libraries) as a static dependency, anyone knows if generating FLIRT signatures works well? not sure which v8 version we're talking about here though
English
0
0
0
257
Alon Ben Tsur retweetledi
Dataflow Security
Dataflow Security@dfsec_com·
Planning a CTF? We're here to support organizers with proven expertise and a commitment to quality challenges. Apply here: dfsec.com/ctf-support
English
0
9
53
8.2K