| Website | https://ankitpati.in |
| GitLab, GitHub, Bitbucket | ankitpati |
| GPG | B8BB CEBC BD6C 4BF0 599C 40F9 360A 9642 9F7A 69DC |
| Twitter (archived) | @nkitpati |
| Website | https://ankitpati.in |
| GitLab, GitHub, Bitbucket | ankitpati |
| GPG | B8BB CEBC BD6C 4BF0 599C 40F9 360A 9642 9F7A 69DC |
| Twitter (archived) | @nkitpati |
'water is transparent only within a very narrow band of the electromagnetic spectrum,
so living organisms evolved sensitivity to that band, and that's what we now call "visible light". '
For educational purposes we disclose this recent hackerone report on #curl claiming its sprintf() implementation is bad because it can be made to deref a bad pointer when you use it incorrectly. You know, exactly how all sprintf() implementation work - by design.
This is not the first time we had this "flaw" reported. (I did not check the "AI slop" checkbox on this one)
## Summary: A vulnerability has been identified in the curl library’s formatted output functions (specifically in curl_msnprintf and its related functions). When a malicious (attacker-controlled) format string containing the %hn conversion specifier is passed, the function incorrectly attempts to write the number of characters printed into a pointer that is not provided by the caller. This...