Sounds like someone needs to turn on some compiler options.
I know the guy who found this exploit, and have personally met him at least once. He used to work for my friend Shawn at BurstNET years ago. He's a really smart guy who left BurstNET to work on GRSecurity.
It just goes to show that you really need to check everything when writing an OS.
|