It should mention the bug only exists after some arbitrary "patch" was introduced. As the current title makes it sounds like the actual zlib has a security issue.
show comments
Goofy_Coyote
Google CTFs are fascinating.
Amazing questions, I always enjoy the write ups.
Unfortunately I’ve never been able to solve one, or even make meaningful progress.
show comments
krackers
Maybe I'm misgeneralizing, but this seems very similar in flavor to the webp vulnerability a few years back
show comments
hamonrye
> LZ77 decoding. This actually triggers the bug and causes integer overflow.
As I understand it, accumulating the tables is contingent on CTW.
It should mention the bug only exists after some arbitrary "patch" was introduced. As the current title makes it sounds like the actual zlib has a security issue.
Google CTFs are fascinating. Amazing questions, I always enjoy the write ups.
Unfortunately I’ve never been able to solve one, or even make meaningful progress.
Maybe I'm misgeneralizing, but this seems very similar in flavor to the webp vulnerability a few years back
> LZ77 decoding. This actually triggers the bug and causes integer overflow.
As I understand it, accumulating the tables is contingent on CTW.
Good god that's a wild read.
I wonder if AIs could catch that.