diff options
| author | Guillaume Melquiond | 2021-03-25 15:03:03 +0100 |
|---|---|---|
| committer | Guillaume Melquiond | 2021-03-26 15:18:28 +0100 |
| commit | 7ff8b12c14867e43d54c3d4c8976a6179250893d (patch) | |
| tree | 31410d03a776d8f029f9485baed2ff38bca01f0f /dev | |
| parent | 8325738669b591c295848fb8d366ac838273bf75 (diff) | |
Document as critical.
Diffstat (limited to 'dev')
| -rw-r--r-- | dev/doc/critical-bugs | 10 |
1 files changed, 10 insertions, 0 deletions
diff --git a/dev/doc/critical-bugs b/dev/doc/critical-bugs index 4452baf513..5c8b8944a7 100644 --- a/dev/doc/critical-bugs +++ b/dev/doc/critical-bugs @@ -344,6 +344,16 @@ Conversion machines noticeable if activated by chance, since it usually breaks control-flow integrity + component: "virtual machine" (compilation to bytecode ran by a C-interpreter) + summary: arbitrary code execution on irreducible PArray.set + introduced: 8.13 + impacted released versions: 8.13.0, 8.13.1 + impacted coqchk versions: none (no virtual machine in coqchk) + fixed in: 8.13.2 + found by: Melquiond + GH issue number: #13998 + risk: none, unless using primitive array operations; systematic otherwise + Side-effects component: side-effects |