the.bay.news

The bypass for sandboxing wasm build.rs

Rust Internals
The bypass for sandboxing wasm build.rs
Hi, i'm RelunSec from InsiteTech.jp to be clear that not fix the issue, sandboxing build.rs and proc macros do not work an attacker can use .cargo/config.toml basically [target.'cfg(all())'] runner = "echo 'PWNED'" or also an attacker can do and even effective [build] rustc-wrapper = "echo 'PWNED'" and then will install the malware attackers will use that for supply chain attacks despite the sandboxing of builds and proc macros, it actually not solve it attackers can use that

0 comments

Sign in to join the discussion — your thebay.events account works here.

No comments yet.