This in of itself can be legitimate. ifunc has real uses and it indeed does not ... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

		nialv7 on March 29, 2024 \| parent \| context \| favorite \| on: Backdoor in upstream xz/liblzma leading to SSH ser... This in of itself can be legitimate. ifunc has real uses and it indeed does not work when sanitizer is enabled. Similar change in llvm: https://github.com/llvm/llvm-project/commit/1ef3de6b09f6b21a...

kzrdude on March 30, 2024 | [–]

Because of the exploit, so, why should we use configurations in production that were not covered by these tests?

lostmsu on March 31, 2024 | [–]

Could that commit also be made by a bad actor?

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact