Io credo che l'integer overflow non gestito sia uno dei bug più comuni del mondo informatico.

Ieri mezza fabbrica si è fermata per quasi un giorno intero a causa di questo. In realtà non avendo accesso al sorgente e non essendoci errori nei log ho fatto una diagnosi puramente comportamentale, ma Rockwell ha confermato la correttezza delle assunzioni dopo poche ore.

In pratica a partire da una data specifica una certa funzione si è bloccata contemporaneamente su più server. Anche in ambiente di DEV. La funzione veniva chiamata, presentava una finestra che flashava e scompariva. Sul log indicava alla stessa data e ora l'attivazione e l'annullamento, che in realtà non c'era.

Ma c'era.

Questa finestra fa partire un timer che aspetta per la sua durata, configurabile, dopodiché annulla l'operazione. Non si può disattivare, e i nostri geniali ingegneri hanno comunemente deciso di popolare quel parametro con un valore di "99999h:59m:59s". Adesso vi lascio immaginare cosa sia successo a partire da ieri.

Spoiler

OK, se hai fatto il conto, manchiamo il bug 2038 per qualcosa come 8000 e rotte ore, meno di un anno, però non sappiamo come questo timeout venga impastato con altri parametri e in quale punto esatto l'intero si rompa. Potrebbe anche essere un integer underflow per quello che ne so, ma rimane il fatto che la finestra si chiude e l'operazione si annulla perché la condizione del timeout viene considerata soddisfatta.

La morale è sempre quella

Fai merenda con girella.

Qualche zucchero in più non fa male se devi usare il cervello.

Se poi sviluppi software, oltre a imparare da uno bravo, controlla i tuoi interi e se invece lo smanetti e basta non usare MAI valori limite, ma mettici la testa: non ha senso un timeout di 10 anni. Considerato tutto, in questo caso, 1 settimana sarebbe sufficientemente cautelativa.

#software #development #bugs #integeroverflow

Rediscovered an 11‑Year‑Old libpng Vulnerability

A beginner in secure code review reintroduced CVE‑2014‑9495 by fuzzing width * bit-depth overflow

https://blog.himanshuanand.com/posts/discovered-a-libpng-vulnerability-11-years-after-it-was-patched/

#libpng #IntegerOverflow

How I Discovered a Libpng Vulnerability 11 Years After It Was Patched

A beginner's journey into secure code review, and how I accidentally rediscovered an 11-year-old vulnerability in libpng.

Terminal

Integer overflow! Integer overflow!

The battery is labeled 44Ah.

The charger shows -24534 mAh.

Assuming this thing uses an int16 to store the charged capacity its now at 41 Ah charged, which is totally fine for a "dead, to be scrapped" car battery.

(Yes I am doing silly off-grid stuff again)

#integeroverflow

Recent addition to the Newton Glossary describing the “Year 2040 Problem”.

#AppleNewton
#RetroComputing
#IntegerOverflow

https://newtonglossary.com/terms/year-2040-problem

Year 2040 Problem

A potential bug affecting Newton devices at some point in the year 2040. The Y2040 problem manifests itself in certain C++ functions that read or set information relating to …

Newton Glossary
Learn a language for free

Learn languages by playing a game. It's 100% free, fun, and scientifically proven to work.

Duolingo

@Configures ...And Red Lion has released updates for Crimson 3.1 and 3.0 if you don't want to upgrade, or for hardware that needs older versions.

Lesson to all coders - when you use a computer to count, take a moment to think about what happens when you run off the end of what you're counting with. Different languages and systems do different things, it may not be a problem - but spend the time to think about it, rather than just assuming it will count forever. #RedLion #Epoch #IntegerOverflow

Apple Products Remote Code Execution Vulnerability Report CVE-2024-1580 Integer Overflow in dav1d AV1 Decoder

Date: February 16, 2024
CVE: CVE-2024-1580
Sources: CVE.mitre.org, GitHub Advisory Database

Issue Summary

CVE-2024-1580 identifies a critical integer overflow vulnerability within the dav1d AV1 decoder. This issue arises when processing videos with large frame sizes, potentially leading to memory corruption within the decoder.

Technical Key findings

The vulnerability specifically affects the decoding process for large video frames in the dav1d AV1 decoder, where improper handling of size calculations can lead to integer overflow.

Vulnerable products

All versions of the dav1d AV1 decoder before 1.4.0 are affected by this vulnerability. Including but not limited to:

  • macOS Sonoma 14.4.1
  • macOS Ventura 13.6.6
  • Safari 17.4.1

But also

  • VideoLAN Project (VLC player)

Impact assessment

Successful exploitation could result in memory corruption, which might allow an attacker to execute arbitrary code or cause a denial of service (DoS) condition on the targeted system.

Patches or workaround

Users are advised to upgrade to version 1.4.0 or later of the dav1d AV1 decoder to mitigate this vulnerability.

Tags

#CVE-2024-1580, #dav1d, #AV1decoder, #integerOverflow, #Apple #VLC #videolan

CVE - CVE-2024-1580

The mission of the CVE® Program is to identify, define, and catalog publicly disclosed cybersecurity vulnerabilities.

@Configures
Red Lion released an update to the latest version of their Crimson 3.2 configuration software last night, less than 24 hours after the rollover event. That fix will be backported to previous versions by mid-next-week.
Kudos to Red Lion for their quick response - now it's time to start installing updates!
#RedLion #Epoch #IntegerOverflow
Red hot news on clock reset (32-bit unsigned integer overflow): Today, Red Lion automation controls system HMI clock issue! Users of certain Red Lion terminals are finding their units have frozen. When reset, they're coming back like it's Jan. 1, 1997, causing incorrect logs and other issues. The vendor is Red Lion and they are investigating. Customers may have to schedule service calls (in the field) to fix the issue. #RedLion #Epoch #IntegerOverflow Busy times for #Jenariah!
@DrHyde I'd argue it's the second #IntegerOverflow test. Might have been signed!