[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Message-ID: <97ce9845-cf2b-4649-a3c1-b5396d84d246@oracle.com>
Date: Mon, 14 Sep 2026 11:28:20 -0700
From: Alan Coopersmith <alan.coopersmith@...cle.com>
To: oss-security@...ts.openwall.com,
Evgenios Gkritsis <evgeniosgkritsis@...il.com>
Subject: Re: rosbridge_library Protocol.incoming() quadratic
CPU cost in JSON fallback
On 9/14/26 11:00, Evgenios Gkritsis wrote:
> I plan to reference this in a research paper on algorithmic-complexity
> vulnerabilities in protocol parsers. I will not disclose publicly until a
> fix is published or 90 days have passed.
You disclosed publicly by mailing to the public oss-security mailing list:
https://www.openwall.com/lists/oss-security/2026/09/14/28
--
-Alan Coopersmith- alan.coopersmith@...cle.com
Oracle Solaris Engineering - https://blogs.oracle.com/solaris
Powered by blists - more mailing lists
Please check out the
Open Source Software Security Wiki, which is counterpart to this
mailing list.
Confused about mailing lists and their use?
Read about mailing lists on Wikipedia
and check out these
guidelines on proper formatting of your messages.
