11 Jan
2023
11 Jan
'23
11:27 p.m.
https://vuls.cert.org/confluence/plugins/servlet/mobile?contentId=97124523#…
On Wed, 11 Jan 2023, 17:13 Dan Cross, <crossd(a)gmail.com> wrote:
The security vulnerability in question could be
briefly summarized as,
"Fortran divide-by-zero gives root." I think that was just a specific
manifestation of the underlying problem, though. More specifically it
was actually due to failure to sanitize state after handling a SIGFPE
(and possibly other signals as well?).
I have a distinct memory of this, but can no longer find any evidence
for it. Did I just make it up from whole cloth, or was this actually a
thing?
- Dan C.