Comment by dcsommer | Hacker News Reader

Top New Best Ask Show Jobs

Comment by dcsommer | Hacker News Reader

Parent Full thread

Do you have data on the relative frequency and severity of non-memory safety integer overflow security issues?

Here are over 3k CVEs that contain "integer overflow". That shouldn't be considered a comprehensive search.

https://cve.mitre.org/cgi-bin/cvekey.cgi?keyword=integer+ove...

You don't need to have to have historical stats to show that it can be a security issue.

I know at least about the DAO hack.

Reply on news.ycombinator.com