IssueRaiser

What you fail to realize is that this attack is simply an academic proof that shows the libc++ implementation is broken and can have quad...

What you fail to realize is that this attack is simply an academic proof that shows the libc++ implementation is broken and can have quadratic performance. This is a bug, because the C++ standard mandates a worst case of O(n log n). What you also don't seem to realize is that this attack merely uses a comparison function to find the worst case. Once the worst case is found you can feed this input to any program using libc++'s std::sort, without comparison function, and trigger the worst case. So no, this is not frivolous at all.

Posted by nightcracker on Feb 24, 2015, 4:34 PM

Tags

Related issues

Raise real-world problems, find people facing the same issue, and discuss solutions.8,000 issues0 comments

reliability (Other)

What you fail to realize is that this attack is simply an academic proof that shows the libc++ implementation is broken and can have quad...

nightcrackerFeb 24, 2015, 4:34 PM

What you fail to realize is that this attack is simply an academic proof that shows the libc++ implementation is broken and can have quadratic performance. This is a bug, because the C++ standard mandates a worst case of O(n log n). What you also don't seem to realize is that this attack merely uses a comparison function to find the worst case. Once the worst case is found you can feed this input to any program using libc++'s std::sort, without comparison function, and trigger the worst case. So no, this is not frivolous at all.

Comments (0)

No comments yet. Start the discussion.

Comment on this issue