A flaky test exposed a Redis client use-after-free
DrNemski
38 points
11 comments
July 22, 2026
Related Discussions
Found 5 related stories in 224.3ms across 9,963 title embeddings via pgvector HNSW
- Kimi K3 exploited the latest Redis server Alifatisk · 50 pts · July 23, 2026 · 59% similar
- Show HN: Learn by rebuilding Redis, Git, a database from scratch acley · 146 pts · July 11, 2026 · 51% similar
- Show HN: KiviDB, a faster Redis-compatible memory database and vector cache murtazayusuf · 66 pts · October 19, 2026 · 47% similar
- I Found a $90k Remote Code Execution Vulnerability in Google soeckly · 193 pts · October 12, 2026 · 47% similar
- Big Fish: Exploiting a 37-Year-Old Kernel Bug in OpenBSD rs_rs_rs_rs_rs · 177 pts · October 16, 2026 · 47% similar
Discussion Highlights (3 comments)
VerifiedReports
That makes no grammatical sense.
serious_angel
Thank you very much! This is great read! Though, no actual steps mentioned, including the: > From this, he ascertained that the exception was triggered by a call to the C function memmove. While the source and destination addresses for this call looked sane, the size field was set to... I do get the most of these stated, but it would be awesome to know more about how he did actually find it, and with what toolset. Was is gdb, Valgrind, JetBrains, IDA Pro, or some another general/complex dump viewer/toolset? And, the interactive miracle, at the top of the website is freaking marvelous... It reminded me of the articles of the fluid simulation algorithms of Yusuke Endoh! Heartfelt gratitude to the developer, the artist who implemented it! Apparently, behind the scene, the fluid colors are contained in an array where every single color has a defined meaning! // categories in STACK order: index 0 at the floor → 4 at the surface const CATS = [ { key: "Code", rgb: [133, 232, 157] }, { key: "Craft", rgb: [179, 146, 240] }, { key: "Lessons", rgb: [249, 117, 131] }, { key: "Story", rgb: [255, 171, 112] }, { key: "Opinion", rgb: [158, 203, 255] }, ];
toast0
> Harder still is when the cause of the bug happens prior to its manifestation. I've yet to debug a big where the manifestation happens prior to the cause... Sounds even harder. :p