70 likes | 195 Views
Team meeting Oct 13, 2011. Bart Coppens. Program differences can be observed. Version 1. Version 2. Security hole fixed New features Watermarks. What changed?. Attacker will use tools to reduce search space. Version 1. Version 2. patch. irrelevant changes. Want to keep
E N D
Team meetingOct13, 2011 Bart Coppens
Program differencescan be observed Version 1 Version 2 • Security hole fixed • New features • Watermarks What changed?
Attacker will use tools to reduce search space Version 1 Version 2 patch irrelevant changes Want to keep relevant changes!
Looked at improving the strict matcheron png patch benchmark png_strncpy(tIME_string, png_convert_to_rfc1123(read_ptr, mod_time), PNG_tIME_STRING_LENGTH); tIME_string[PNG_tIME_STRING_LENGTH] = '\0'; Points to index after another 0-byte No data dependency to fprintf!
Other way to improve false rates 0x08048441 <+177>: movl $0x0,0xc(%esp) 0x08048449 <+185>: movl $0x0,0x8(%esp) 0x08048451 <+193>: movl $0x0,0x4(%esp) 0x08048459 <+201>: movl $0x80bb72c,(%esp) 0x08048460 <+208>: call 0x804fc50 <png_create_read_struct> 0x08048441 <+177>: movl $0x0,0xc(%esp) 0x08048449 <+185>: movl $0x0,0x8(%esp) 0x08048451 <+193>: movl $0x0,0x4(%esp) 0x08048459 <+201>: movl $0x80bb72c,(%esp) 0x08048460 <+208>: call 0x804fc50 <png_create_read_struct>