Image flaw pierces PC security

TalkBack 10 of 50:

Next »

« Previous

• Thread View
• Flat View

Advanced code and compilers.

PNG is "the" format for direct math graphing, yes, contains maybe to many features,
one thing for sure, implemented and compiled with VisualC(++) to a large extent,
and Gcc, to a lesser extent, have poor RT handling.

(Gcc is coming, as I just had a very pleasant run with Gnu Octave, on Cygwin.)

I tried to emulate the flaw(s) with some older versions of the PNG SRC compiled with
Borland Bcc32 on a W32 box, as the most vulnerable OS choice....

I will not provide any tech description, but it seems like the highly advanced RT
of , the now four year "old" Bcc32 5.5.1, provided a remedy, through its TLS (thread local storage)
with full callback of thrown thread objects.

Can so far, in no way emulate mentioned flaw(s) or make any of the 8 tested dll's / executables
crash or latch in any way, despite smacking them with multi 100 MB semi dirty *.png images,
and am short of time for to proceed in this "mission impossible" pursuit.

To preliminary show that sloppy compilers are more of a security risk, compared
with the actual Hll code implementations.

Posted by: pj-xmesh   Posted on: 08/06/04 You are currently: a Guest | Members login | Terms of Use

Alert moderator to an offensive message

Subscribe to this discussion via Email or RSS

SponsoredWhite Papers, Webcasts, and Downloads

• VMware Infrastructure: A Guide to Bottom-Line Benefits VMware Frustrated by the costs of maintain ever larger data centers?or building ... Download Now
• Effective Performance Testing in Java Environments Quest Software When applications perform poorly so does your business. With performance ... Download Now
• Three Steps You Need to Know to Stop Data Loss Varonis Sensitive data exposed to misuse or loss... it is the stuff of nightmares ... Download Now