Re: Thanks to LA CocoaHeads on my pasteboard bug
Re: Thanks to LA CocoaHeads on my pasteboard bug
- Subject: Re: Thanks to LA CocoaHeads on my pasteboard bug
- From: Jayson Adams <email@hidden>
- Date: Sun, 16 Sep 2007 12:32:46 -0700
On Sep 16, 2007, at 11:30 AM, Fritz Anderson wrote:
On Sep 16, 2007, at 11:50 AM, Gordon Apple wrote:
...
I found that
with anything that uses the pasteboards (in this case the drag
pasteboard),
it is possible to bring down the system big time. I was messing
it up so
bad that I was unable to quit or force quit ANY application or
restart from
the menu. The only way out was to force a reboot from the power
button on
my new MacBook Pro.
I fear that someone might be able to exploit this to install a
rogue
background application that would make the machine unusable. I
would hope
that there might be some way to protect against this.
This is serious. What was the bug number you got when you reported
it at bugreport.apple.com?
It wasn't really a pasteboard problem. The bug involved unarchiving
from an uninitialized NSData variable, so the unarchiver was reading
in garbage. I can think of other ways to bring a machine to its
knees (spawning lots of threads and processes is just one example).
As for turning this into an exploit, you're only in danger if you
install rogue software on your computer, which you don't want to do
in general.
Best,
__jayson
Circus Ponies NoteBook - Organization for a Creative Mind
www.circusponies.com
_______________________________________________
Cocoa-dev mailing list (email@hidden)
Please do not post admin requests or moderator comments to the list.
Contact the moderators at cocoa-dev-admins(at)lists.apple.com
Help/Unsubscribe/Update your Subscription:
This email sent to email@hidden