Post #2234494
2025-12-03 16:11 UTC
@meetingcpp@mastodon.online @JSAMcFarlane@mastodon.ie This is only true if your serialization format allows values other than 0 or 1 which is usually not the case. There are non exploitable issues on serialization side though.
Replies (2)
-
@vitaut@mastodon.social 2025-12-03 16:12
@meetingcpp@mastodon.online @JSAMcFarlane@mastodon.ie I fixed one of such issues in Thrift =)
-
@meetingcpp@mastodon.online 2025-12-03 16:15
@vitaut@mastodon.social @JSAMcFarlane@mastodon.ie for how many serialization libraries would that be when reading from the network?