[Haskell-cafe] More on the random idea

Stefan O'Rear stefanor at cox.net
Mon May 28 12:34:03 EDT 2007


On Mon, May 28, 2007 at 07:26:46PM +0300, Gaal Yahas wrote:
> On 5/26/07, Isaac Dupree <isaacdupree at charter.net> wrote:
> >> We should document all the interesting exploits that have been found
> >> over the years!
> >
> >Ok, I'm making
> >http://haskell.org/haskellwiki/Safely_running_untrusted_Haskell_code
> 
> That page mentions:
> 
> * very large array allocations can integer overflow the storage
> manager, allowing arbitrary memory access
> 
> Does this still happen? Sounds like a serious bug in the runtime.

stefan at stefans:~$ ghci
   ___         ___ _
  / _ \ /\  /\/ __(_)
 / /_\// /_/ / /  | |    GHC Interactive, version 6.7.20070518, for Haskell 98.
/ /_\\/ __  / /___| |    http://www.haskell.org/ghc/
\____/\/ /_/\____/|_|    Type :? for help.

Loading package base ... linking ... done.
Prelude> :m + Array
Prelude Array> array (0::Int, maxBound) [(1000000,'x')]
array (0,2147483647) [(0,Segmentation fault

Stefan


More information about the Haskell-Cafe mailing list