RC RANDOM CHAOS

memory safety

2 posts

Article

How GCC 4.3 deleted a NULL check in 2009

How undefined behavior in C lets compilers delete safety checks, why it drives most memory-safety CVEs, and what it means for AI-generated code.

Article

NGINX rewrite module bleeds memory

CVE-2026-42945 places a heap buffer overflow inside NGINX's rewrite module, on the request path. Defect class confirmed. Impact not confirmed.