Вход на сайт

Просмотр новости

Найдите то, что Вас интересует

CFXMLParser 7-Byte Crasher

Дата публикации: 29-09-2026 18:38:52

Nicolas Seriot: // "<a>" in UTF-16 LE + a single dangling byte const UInt8 bytes[] = {'<', 0, 'a', 0, '>', 0, 'X'}; […] The whole bug is a confusion between bytes left versus UTF-16 characters left. The result is repeated buffer doubling until allocation fails, and a local process crash if the exception is […]

Основное содержимое страницы с новостью.

Nicolas Seriot:

// "<a>" in UTF-16 LE + a single dangling byte
const UInt8 bytes[] = {'<', 0, 'a', 0, '>', 0, 'X'};

[…]

The whole bug is a confusion between bytes left versus UTF-16 characters left. The result is repeated buffer doubling until allocation fails, and a local process crash if the exception is uncaught.

Bug Core Foundation Mac macOS 27 Golden Gate Programming Unicode XML

3 Comments RSS · Twitter · Mastodon

Anonymous

This post is cool but CFXMLParser has been deprecated since 10.8. Can we get some posts about new bugs in frameworks like Foundation.


someone

> This post is cool but CFXMLParser has been deprecated since 10.8.

There are plenty of software that use deprecated APIs and run on the latest OS versions. In the case of Apple platforms, it's either to maintain backward compatibility or because the "geniuses" at Cupertino deprecate/obsolete APIs/frameworks before (ever)? providing a replacement (I'm not event talking about a reliable one).


Dave

> "...Cupertino deprecate/obsolete APIs/frameworks before (ever)? providing a replacement ..."

Good point, but let me give you another reason... GLKit, as in OpenGL. It's been deprecated since iOS 12 and macOS 10.14, replaced with Metal. Yet here we are, 8 years later. Is Metal *better* or *more modern* than OpenGL? Debatable. But realistically, in technical terms please, how can Apple break something that would immediately obsolete a decent percentage of apps out there?

Leave a Comment

Схожие новости

#Наименование новостиТональностьИнформативностьДата публикации
1Mac Installer Plug-Ins Bug014.7302-10-2026
2Illegal HTML from Autolinks in Link Text07.6628-07-2026
3Using link reference definitions as invisible structural markers — sound, or a bad idea?01027-09-2026
4A list of common mistakes that people make while writing Markdown010.420-08-2026
5Число пострадавших в ДТП с автобусом в Забайкалье выросло06.3130-09-2026
6Patches Updated To Begin Removing The Linux x32 ABI05.2908-10-2026
7Boeing identifies 737 MAX software glitch014.0527-09-2026
8В Забайкалье выросло число пострадавших в ДТП с автобусом и большегрузом04.6230-09-2026
9Plane crash in Buffalo, Minnesota? Reports of small aircraft incident near airport, what we know05.2927-09-2026

Классификация: . Схожих патентов: 0. Схожих новостей: 9. Тональность: 0. Информативность: 13.76. Источник: mjtsai.com.