It's Just Not Big Enough
The claim that 64bit platforms are not exploitable is
incorrect. This is the same mindset that created today's
LZO/LZ4 vulnerability. "No one will ever have that much
RAM to cause a 32bit integer overflow!". Well, today we
do. If this bug would have persisted and propagated
further, surely 64bit architectures would be effected in
the not-so-near future.
Worrying that RAM sizes will exceed 64-bit addressability hasn't been one of my worries. 2^64 is about 70,000 Petabytes. Of course, it wasn't too long ago when a Petabyte seemed unattainable, and not too long before that that a Gigabyte seemed giant, and even a Megabyte once seemed almost limitless. Am I just being short sighted?