Pegasus and Nation-State Level Attacks
eu-16-Bazaliy-Mobile-Espionage-in-the-Wild-Pegasus-and-Nation-State-Level-Attacks
eu-16-Bazaliy-Mobile-Espionage-in-the-Wild-Pegasus-and-Nation-State-Level-Attacks
You also want an ePaper? Increase the reach of your titles
YUMPU automatically turns print PDFs into web optimized ePapers that Google loves.
OSNumber missing check<br />
bool OSNumber::init(unsigned long long inValue, unsigned int newNumberOfBits) {<br />
if (!super::init())<br />
return false;<br />
size = newNumberOfBits;<br />
value = (inValue & sizeMask);<br />
No number length check<br />
}<br />
return true;<br />
unsigned int OSNumber::numberOfBytes() const {<br />
}<br />
return (size + 7) / 8;<br />
numberOfBytes return value is<br />
under attacker’s control<br />
Source: https://opensource.apple.com/source/xnu/xnu-3248.60.10/libkern/c++/OSNumber.cpp
Change language