Submitted via IRC for Fnord666
A security researcher has found a new way to crash and restart any iPhone — with just a few lines of code. Sabri Haddouche tweeted a proof-of-concept webpage with just 15 lines of code.
Sabri Haddouche tweeted a proof-of-concept webpage with just 15 lines of code which, if visited, will crash and restart an iPhone or iPad. Those on macOS may also see Safari freeze when opening the link.
Source: https://techcrunch.com/2018/09/15/a-new-css-based-web-attack-will-crash-and-restart-your-iphone/
(Score: 2) by MichaelDavidCrawford on Tuesday September 18 2018, @08:39PM
I'm going to dig up the bug number then submit a new bug that references it
The problem is that iOS overcommits resources. It's just like check kiting: write a hot check then go to Vegas in hopes you can win enough to cover your chef
In my specific case, allocating too much memory with calloc() will crash the app rather than return NULL. This because the amount of memory that really does get allocated is substantially less than the requested amount. calloc() zeroes its buffer, eventually writes into unmapped memory.
Apple's response? They asserted that I was ignorant then closed the bug.
Yes I Have No Bananas. [gofundme.com]