Researcher reports double-free in PHP 8.4.25, 8.5.10 and 8.5.12
Elise sent PHP a short proof of concept; no CVE, patch, or vendor confirmation is stated.
1
Stories per day · 30 days
3 stories, newest first · one card per story
Stories tagged #asan
Calling a function in C without naming it
Student write-up demonstrates calling execve in C without naming the symbol, bypassing an automated code grader's AST-based function allowlist checks.
2
Testing race conditions with memory access tracing and stack-based delay injection
Google Project Zero released MAccConc, Linux kernel tooling that traces memory accesses to explore and test race condition interleavings.
4