[illumos-gate] 8679 failed to attach AMD IOMMU -- Gordon Ross <gordon.w.ross⊙gc>

Thanks alanc ... about what I thought and a challenge for the single minded with the generalized language tools available and no reasonable explanation for supporting archaic system emulation

But I would incorporate it all into the java virtual machine just to add bloat to a tragedy yet to unfold for app designers.

dtrace.org cert is expired: Expired: Tuesday, 22. November 2022 at 19:20:50 Eastern European Standard Time

[illumos-gate] 15385 Update AMD microcode to 20230131 -- Andy Fiddaman <illumos⊙fn>

[illumos-gate] 15386 signalfd overzealous with clean-up -- Patrick Mooney <pmooney⊙pc>

Has anybody gotten this to work on illumos? infosec.exchange/@hdm/109861299289142757

This makes it seem like it's trivial to crash sshd, but I can't make this example work against SmartOS with OpenSSH 9.1

[illumos-gate] 15387 snoop: buffer overflow in netbiosname2ascii() -- Toomas Soome <tsoome⊙mc>

bahamat: The advisory gives a hint:... (full message at <libera.ems.host/_matrix/media/v3/do…6a28b5b6b398cc2cd02851c461759b10af1>)

* bahamat: The advisory gives a hint:... (full message at <libera.ems.host/_matrix/media/v3/do…845e6f83c5e6e70e8f1fdb79e42eadf3a13>)

toasterson: what irc client are you using?

matrix

is it spamming?

no

just somewhat amused that despite 20+year old text based irc clients figured out how to deal with ircd line limits, it decided to go it's own route

their developers must be part of the 'http(s) is a hammer to solve all ills' camp

:)

Ah, because it posts HTTP links?

yeah.. presumably for overly long lines

instead of just breaking them up

The message was Markdown formatted

I think they might render them on demand though

yeah, and when you edit stuff it just posts it over again.

Let's see what it does when I do bold or strikethrough ~~The world is flat.~~

half there

I see bold, but just double-tilde-wrapped text for the strikethrough attempt.

H~2~O X^2^

Hmm this markdown rendering does not seem complete not even for me

yeah.. irc's supported bold for a long time (ctrl-b)

Sub and superscript are not even supported in Matrix itself it seems.

but yeah-- that exploit seems to require malloc()/free() to act in a specific way (which it doesn't always do)

i'd imagine on illumos it might require adjustments

to work

i definitely wouldn't count on being immune.. at best (and i'd still have reservations) if linked against umem, it might just result in a DOS attack

[illumos-gate] 15388 clear_locks(8) needs resilience -- Dan McDonald <danmcd⊙mi>

tsoome: illumos.org/issues/15387 more like byte-sized :-p

→ BUG 15387: snoop: buffer overflow in netbiosname2ascii() (Closed) | code.illumos.org/c/illumos-gate/+/2649

jbk: Yeah, we've updated already. Just trying to figure out if this warrants a "you should upgrade immediately" advisory notice.

I mean, it can't hurt?