<story><title>OpenSSL CVE-2016-0799: heap corruption via BIO_printf</title><url>https://guidovranken.wordpress.com/2016/02/27/openssl-cve-2016-0799-heap-corruption-via-bio_printf/</url></story><parent_chain></parent_chain><comment><author>narrator</author><text>This is one of those &amp;quot;let&amp;#x27;s ignore malloc failing&amp;quot; bugs.  This is pretty common in C code and is, IMHO, a common  &amp;quot;worse is better&amp;quot;[1] anti-pattern, which is predicated on the &amp;quot;worse is better&amp;quot; principle that correctness can be sacrified if it makes things too complicated.  Many programmers, unfortunately,  don&amp;#x27;t give a crap about things that far off the happy path, and when the language implements checked exceptions or Option types they get upset that it forces them to think about those distracting corner cases.  Such is the state of software engineering.&lt;p&gt;1. &lt;a href=&quot;https:&amp;#x2F;&amp;#x2F;en.m.wikipedia.org&amp;#x2F;wiki&amp;#x2F;Worse_is_better&quot; rel=&quot;nofollow&quot;&gt;https:&amp;#x2F;&amp;#x2F;en.m.wikipedia.org&amp;#x2F;wiki&amp;#x2F;Worse_is_better&lt;/a&gt;</text></comment>
<story><title>OpenSSL CVE-2016-0799: heap corruption via BIO_printf</title><url>https://guidovranken.wordpress.com/2016/02/27/openssl-cve-2016-0799-heap-corruption-via-bio_printf/</url></story><parent_chain></parent_chain><comment><author>ComputerGuru</author><text>There was &amp;quot;fair notice&amp;quot; given last week (and front page&amp;#x27;d here on HN) about an upcoming release patching &amp;quot;several&amp;quot; vulnerabilities: &lt;a href=&quot;https:&amp;#x2F;&amp;#x2F;mta.openssl.org&amp;#x2F;pipermail&amp;#x2F;openssl-announce&amp;#x2F;2016-February&amp;#x2F;000063.html&quot; rel=&quot;nofollow&quot;&gt;https:&amp;#x2F;&amp;#x2F;mta.openssl.org&amp;#x2F;pipermail&amp;#x2F;openssl-announce&amp;#x2F;2016-Febr...&lt;/a&gt;&lt;p&gt;However, they&amp;#x27;re scheduled for release on Monday the 1st of March - so we might be seeing a few more bugs in the next couple of days.&lt;p&gt;EDIT: I&amp;#x27;ve spent all morning teasing a friend whose birthday is today about &amp;quot;what if it were tomorrow&amp;quot; (I&amp;#x27;m sure they get it every year from every single person they meet), only to then come here and forget all about it in my tally. Go figure. Yes, the 1st of March is Tuesday. Sorry!</text></comment>