WebApp Sec mailing list archives

Re: [Full-disclosure] 4 Questions: Latest IE vulnerability, Firefox vs IE security, User vs Admin risk profile, and browsers coded in 100% Managed Verifiable code


From: Andrew van der Stock <vanderaj () greebo net>
Date: Wed, 29 Mar 2006 13:17:12 +1100

This is not quite true.

Java does not prevent integer overflows (it will not throw an exception). So you still have to be careful about array indexes.

Andrew

On 29/03/2006, at 12:49 PM, michaelslists () gmail com wrote:

no, a browser written in java would not have buffer overflow/stack
issues. the jvm is specifically designed to prevent it ...

-- Michael

Attachment: smime.p7s
Description:


Current thread: