Per Vognsen on Nostr: Have there been any RCEs in the wild from attacker-controlled NaN injection into ...
Have there been any RCEs in the wild from attacker-controlled NaN injection into sorting functions like C++ std::sort where non-total (in this case even non-partial) orderings lead to undefined behavior?
Published at
2024-11-28 16:23:47 UTCEvent JSON
{
"id": "dbece65d000a02d5bb83662979c89f6689e3d61a204ec6e117e01d230082a1b0",
"pubkey": "a297d2ef6a36a76aa5241cfc4c0ab5ab13e37ab15aaa46b48dabd8cc3ace895c",
"created_at": 1732811027,
"kind": 1,
"tags": [
[
"proxy",
"https://mastodon.social/users/pervognsen/statuses/113561503523335898",
"activitypub"
]
],
"content": "Have there been any RCEs in the wild from attacker-controlled NaN injection into sorting functions like C++ std::sort where non-total (in this case even non-partial) orderings lead to undefined behavior?",
"sig": "998069a2862b76b5f04b38e94431d3e2c48678979cbac72be5c31f04854819de4aae8dd002f4dd8048fe5be76591bb384a53aac938413dc6eae9d77850ff8342"
}
