TehPenguin, 18 days ago If you're going to claim something is a security issue, please explain what the attacker has gained by exploiting the bug. That is, what they can now do they couldn't before. If you can't explain what the attacker has gained, then that's not a security bug, that's just sparkling MS07-052 (https://web.archive.org/web/20100930203109/http://blogs.msdn.com/b/oldnewthing/archive/2007/08/07/4268706.aspx#4282521) #RulesForBugFiling #RustLang #Rust #cpp #infosec
If you're going to claim something is a security issue, please explain what the attacker has gained by exploiting the bug. That is, what they can now do they couldn't before.
If you can't explain what the attacker has gained, then that's not a security bug, that's just sparkling MS07-052 (https://web.archive.org/web/20100930203109/http://blogs.msdn.com/b/oldnewthing/archive/2007/08/07/4268706.aspx#4282521)
#RulesForBugFiling #RustLang #Rust #cpp #infosec