Kusatetezeka kwamasiku 0 mu Chrome kuwululidwa kudzera pakuwunika kwakusintha kwa injini ya V8

Ofufuza ochokera ku Eksodo Intelligence awonetsa malo ofooka pokonza zofooka mu Chrome/Chromium codebase. Vutoli limachokera ku mfundo yakuti Google imawulula kuti zosintha zomwe zasinthidwa zikugwirizana ndi nkhani zachitetezo pokhapokha atamasulidwa, koma
amawonjezera khodi kumalo osungirako kuti akonze chiwopsezo mu injini ya V8 musanasindikize kutulutsidwa. Kwa nthawi ndithu, zokonzedwazo zimayesedwa ndipo zenera likuwonekera pamene chiwopsezocho chimakhazikika mu code base ndipo chimapezeka kuti chiwunikidwe, koma chiwopsezocho chimakhalabe chosakhazikika pamakina ogwiritsira ntchito.

Powerenga zosintha zomwe zidachitika pamalo osungira, ofufuza adawona china chake chomwe chidawonjezedwa pa February 19 kukonza ndipo m’masiku atatu adakhoza kukonzekera dyera masuku pamutu, zomwe zikukhudza kutulutsidwa kwaposachedwa kwa Chrome (zotulutsidwa zomwe zidasindikizidwa sizinaphatikizepo zida zodutsira kudzipatula kwa sandbox). Google mwachangu anamasulidwa Kusintha kwa Chrome 80.0.3987.122, kukonza zomwe akufuna kuchita kusatetezeka (CVE-2020-6418). Chiwopsezochi chinadziwika ndi akatswiri a Google ndipo chimayamba chifukwa cha vuto la kasamalidwe ka mtundu mu ntchito ya JSCreate, yomwe ingagwiritsidwe ntchito pogwiritsa ntchito njira ya Array.pop kapena Array.prototype.pop. N’zochititsa chidwi kuti panalinso vuto ngati limeneli okhazikika mu Firefox chilimwe chatha.

Ofufuzawo adawonanso kumasuka kopanga zochitika chifukwa chophatikiza Chrome 80 makina kunyamula zizindikiro (m'malo mosunga mtengo wathunthu wa 64-bit, magawo apadera a pointer okha amasungidwa, omwe amatha kuchepetsa kwambiri kukumbukira kwa mulu). Mwachitsanzo, zinthu zina zamutu wa mulu wa data monga tabu yopangira zinthu, zinthu zachilengedwe, ndi mizu zinthu Zotolera zinyalala tsopano zaperekedwa ku ma adilesi odziwika bwino komanso olembedwa.

Chochititsa chidwi, pafupifupi chaka chapitacho Eksodo Intelligence anali zachitika chiwonetsero chofananira cha kuthekera kopanga mwayi wogwiritsa ntchito pophunzira zolemba zapagulu zowongolera mu V8, koma, mwachiwonekere, ziganizo zoyenera sizinatsatidwe. M'malo mwa ofufuza
Exodus Intelligence atha kukhala owukira kapena mabungwe anzeru omwe, akapanga zachinyengo, atha kukhala ndi mwayi wopezerapo mwayi mwachinsinsi kwa masiku kapena milungu ingapo kuti Chrome itulutsidwe.

Source: opennet.ru