#c_1
-
Why POSIX wordexp(3) Is Dangerous on Untrusted Input
POSIX's wordexp(3), often recommended for tilde expansion, performs command substitution by default — and the WRDE_NOCMD flag doesn't always save you.
-
A Python Interpreter in 1024 Bytes of Pure C
For the fun of it, Austin Henley wrote a tiny interpreter for a subset of Python in C, fitting it into exactly 1024 bytes. No macros, no library tricks.
-
How Fuzzing Found a DoS Vulnerability in the ActivityPub Server snac2
Inspired by debates about the future of vulnerability research, a novice researcher took the popular minimalist server snac2 and, within minutes of fuzzing, discovered an unauthenticated remote denial of service.