[TALK] Proving fundamental Unix guarantees

[Steve Landers]

On Monday, June 30, 2003, at 02:28  PM, Peter Jeremy wrote:

> The vendor has suggested that the
> kernel passes memory to the application without initialising it and
> therefore it is a bug in the application.

Ask your vendor if this means their OS has an exploitable security flaw 
- that a malicious application could scan through uninitialised memory 
looking for private information from another process.

I'd be interested to hear their reaction ;-)

Steve