Empresas
Empregos
  • Sobre nós
  • Soluções
    • Publicação de vagas
      Publique sua vaga e receba candidatos qualificados em 48h.
    • Avaliações de candidatos
      Mais de 500 testes técnicos e psicológicos, mais anti-fraude.
    • Headhunting
      Busca executiva personalizada do início ao fim.
    • Folha de Pagamento + EOR
      Dispersão de folha e EOR em mais de 15 países da LATAM.
  • Preços
  • Empregos

0

164
Visualizações
How dangling reference can compromise security?

https://stackoverflow.com/a/69322771/12262729

This post suggests that dangling reference in code run by browser can be entry point to bypass system's security with malicious code - how is it possible?

about 4 years ago · Juan Pablo Isaza
2 Respostas
Responde à pergunta

0

The danger is similar to buffer overflows.

The memory that a dangling reference points to could be used in a new allocation. If the program then writes through the dangling pointer, it will write unintended values to that memory.

If that memory happens to be used to hold security-related information (such as a username) and an exploit is able to get information it wants to be written there, it can change the result of the security check.

That's quite a few "if"s, so that kind of exploit is pretty unlikely. More likely is just causing the program to crash. If a hacker can cause an important program to crash, that's considered a security problem.

about 4 years ago · Juan Pablo Isaza Relatório

0

The post you point to explains why manual memory management is NOT available in JavaScript. IF it was, that would lead to possible dangling references and the consequent security holes. Since this hypothetical scenario is not a reality, JavaScript code cannot suffer from dangling references.

about 4 years ago · Juan Pablo Isaza Relatório
Responde à pergunta
Encontrar trabalhos remotos

Descubra a nova forma de encontrar um emprego!

melhores empregos
Principais categorias de trabalho
Empresas
Postar vaga Preços Comercial
Jurídico
Termos e Condições Política de privacidade
© 2026 PeakU Inc. All Rights Reserved.
Andres GPT
Recomende algumas ofertas para mim
Preciso de ajuda