~/talk

The emoji that Killed Chrome!!

Talkat !!Con 2017 · 2017-05-06..05-07· [web-platform, security]
links:none on file
slides:none on file

An office-wide Chrome crash traces to a printer advertising an emoji over mDNS; capturing traffic with tcpdump and shrinking it with tcpreplay isolates the failure to two packets. Attaching gdb shows a null-pointer in a string length call caused by creating an NSString with invalid UTF-8 (a UTF‑8-of-UTF‑16 emoji sequence), and the concrete remediation is a one-line Objective‑C change to handle the invalid encoding instead of dereferencing nil.

AI-written summary · about

  1. 0:00Start
  2. 1:51Gdb
  3. 3:24Tcp Dump
  4. 3:46Tcp Replay
  5. 4:29Shrinking of Inputs
  6. 7:35Why Does this Cause Chrome To Crash
~/search
type to search 6,249 conferences, 138,987 speakers and 185,172 talks
~/help
cmdctrl k
search every conference, speaker and series
/
focus the filter search
h
home
c
conferences
s
speakers
e
series
t
light / dark — the status bar button does the same
?
this help
esc
close this, then clear every filter — or just the search, while you are typing in it

Ignored while you are typing. Pages without a filter rail have no search to focus.