385 karma · joined May 16, 2018
So if you're going to add a flag to something to let users conceal a region of memory from a core dump, add it to madvise, adding it to mmap is just adding arbitrary restrictions on the programmer.
Linux got it right with MADV_DONTDUMP
>> Debian X.x (stable) >> foo <5-10 years old release> >> >> <XXth duplicate of a 7 year old issue that has been fixed 3+ years ago | 5 year old Debian-only bug caused by a Debian patch>.
>The only appropriate reply to such bugs IMHO is:
>> Fuck off. And don't come back before switching to a distribution >> with a non-broken definition of stability.
>Unfortunately, most upstreams always try to stay civil.
For anyone curious why WAFs are so useless, there is a very beginner-accessible talk by Joe McCray here: https://www.youtube.com/watch?v=qBVThFwdYTc