The double free mach port bug: The short story of a dead 0day

The iOS 8 security update bulletin has many fixed bugs, one of which is this one:
A double free issue existed in the handling of Mach ports.
This issue was addressed through improved validation of Mach ports.
CVE-2014-4375 : an anonymous researcher.

The iOS 8 security update bulletin has many fixed bugs, one of which is this one:
A double free issue existed in the handling of Mach ports.
This issue was addressed through improved validation of Mach ports.
CVE-2014-4375 : an anonymous researcher.
Well, I’ve known this bug for a while and it was insanely fun as anti-debugging measure because of its random effects when triggered. For example, sometimes you get an immediate kernel panic, others nothing happens, and most of the time you get weird CPU spikes not attributed to any process, or system lock ups after a while.


Print Share Comment Cite Upload Translate
APA
() » The double free mach port bug: The short story of a dead 0day. Retrieved from https://www.truth.cx/2014/09/24/the-double-free-mach-port-bug-the-short-story-of-a-dead-0day/.
MLA
" » The double free mach port bug: The short story of a dead 0day." - , https://www.truth.cx/2014/09/24/the-double-free-mach-port-bug-the-short-story-of-a-dead-0day/
HARVARD
» The double free mach port bug: The short story of a dead 0day., viewed ,
VANCOUVER
- » The double free mach port bug: The short story of a dead 0day. [Internet]. [Accessed ]. Available from: https://www.truth.cx/2014/09/24/the-double-free-mach-port-bug-the-short-story-of-a-dead-0day/
CHICAGO
" » The double free mach port bug: The short story of a dead 0day." - Accessed . https://www.truth.cx/2014/09/24/the-double-free-mach-port-bug-the-short-story-of-a-dead-0day/
IEEE
" » The double free mach port bug: The short story of a dead 0day." [Online]. Available: https://www.truth.cx/2014/09/24/the-double-free-mach-port-bug-the-short-story-of-a-dead-0day/. [Accessed: ]
Select a language: