"it's not a memory safety issue, the parser just doesn't check properly"
...er, dear person being wrong on fedi, what do you think a memory safety problem actually **is?!**
Follow
@millihertz
Accessing memory of an object beyond its lifetime for example.
I won't generally put input sanitisation in the memory safety issues category, should I? 🤔
@millihertz
Oh, in this context — yes, that certainly IS a memory safety issue!
But in general… There are lots of other way to fsck the parser up 😆
@m0xee the problem here was that the file being input crashed the parser, presumably by overrunning the allocated buffer, and that crashed everything else. that's pretty much the canonical example of a memory safety issue. it didn't even get as far as failing to sanitise the input.