Garbage collection and closures

Me, Surma, and Jason were hacking on a thing, and discovered that garbage collection within a function doesn't quite work how we expected. function demo const bigArrayBuffer = new ArrayBuffer100000000; const id = setTimeout = console.logbigArrayBuffer.byteLength; , 1000; return = clearTimeoutid;...

Garbage collection and closures

Me, Surma, and Jason were hacking on a thing, and discovered that garbage collection within a function doesn't quite work how we expected. function demo const bigArrayBuffer = new ArrayBuffer100000000; const id = setTimeout = console.logbigArrayBuffer.byteLength; , 1000; return = clearTimeoutid;...

SIEM is not storage, with Jess Dodson (Lock and Code S05E16)

This week on the Lock and Code podcast… In the world of business cybersecurity, the powerful technology known as "Security Information and Event Management" is sometimes thwarted by the most unexpected actors—the very people setting it up. Security Information and Event Management—or SIEM—is a te...

US senators ask FTC to investigate car makers’ privacy practices

An ongoing US Senate investigation indicated that connected car makers violate consumer privacy by sharing and selling drivers’ data, including their location, on a vast scale, and that the same car makers often obtain consumer consent through deception. Based on this investigation, senators have...

PT-2024-40823 · Git +1 · Ghostscript

Name of the Vulnerable Software and Affected Versions: No specific software or versions mentioned. Description: A crash occurred due to a segmentation fault on an unknown address. The crash state included functions such as gs gc reclaim, ireclaim, and interp reclaim. Recommendations: At the momen...

How to collect XenServer Conversion Manager logs

Collect XenServer Conversion Manager logs for analysis...

kernel: netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path

A flaw was found in the Linux kernel’s Netfilter nftables module. The issue arises from improper mutex handling during the garbage collection GC process. The problem occurs between the critical functions nftgcseqbegin and nftgcseqend, where a mutex lock is incorrectly released too early, leading ...

kernel: nftables: nft_set_rbtree skip end interval element from gc

A flaw was found in the Linux kernel’s Netfilter subsystem. This issue occurs in the nftsetrbtree. rbtree lazy gc on insert, which might collect an end interval element just added in a transaction and skip the end interval elements not yet active...

kernel: af_unix: Fix garbage collector racing against connect()

A flaw was found in the Linux kernel, where the management of inter-process communication uses AFUNIX sockets. The issue arises from a race condition where a partially initialized socket with specific permissions carrying SCMRIGHTS is improperly handled during garbage collection. This situation...

kernel: netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path

A flaw was found in the Linux kernel’s Netfilter nftables module. The issue arises from improper mutex handling during the garbage collection GC process. The problem occurs between the critical functions nftgcseqbegin and nftgcseqend, where a mutex lock is incorrectly released too early, leading ...

kernel: nftables: nft_set_rbtree skip end interval element from gc

A flaw was found in the Linux kernel’s Netfilter subsystem. This issue occurs in the nftsetrbtree. rbtree lazy gc on insert, which might collect an end interval element just added in a transaction and skip the end interval elements not yet active...

kernel: af_unix: Fix garbage collector racing against connect()

A flaw was found in the Linux kernel, where the management of inter-process communication uses AFUNIX sockets. The issue arises from a race condition where a partially initialized socket with specific permissions carrying SCMRIGHTS is improperly handled during garbage collection. This situation...

This Machine Exposes Privacy Violations

A former Google engineer has built a search engine, webXray, that aims to find illicit online data collection and tracking—with the goal of becoming “the Henry Ford of tech lawsuits.”...

Security Bulletin: IBM Event Streams is vulnerable to a denial of service attack due to the protobuf-java core and lite ( CVE-2022-3171).

Summary Protobuf-java core and lite are used by IBM Event Streams. The protobuf-java core library provides comprehensive functionality for working with Protocol Buffers, including advanced parsing and serialization, while the protobuf-java-lite library offers a performance-optimized version for...

SUSE CVE-2024-39503

In the Linux kernel, the following vulnerability has been resolved: netfilter: ipset: Fix race between namespace cleanup and gc in the list:set type Lion Ackermann reported that there is a race condition between namespace cleanup in ipset and the garbage collection of the list:set type. The...

CVE-2024-39503

In the Linux kernel, the following vulnerability has been resolved: netfilter: ipset: Fix race between namespace cleanup and gc in the list:set type Lion Ackermann reported that there is a race condition between namespace cleanup in ipset and the garbage collection of the list:set type. The...

Ctrix Virtual Apps and Desktop - Troubleshooting; Tools and Data collection

Introduction This article is a summary of the top support articles related to the data collection process. There are two main areas covered in this summary including data collection guidance and tools. Top Knowledge Content Citrix Tools: CTX203082 - Citrix Supportability Pack CTX677255 - Citrix...

Citrix Endpoint Management: Database issues

Introduction Citrix offers a series of articles dedicated to troubleshooting various database issues, such as connectivity problems, performance bottlenecks, and data corruption. By enabling quick diagnosis and resolution, these articles help minimize downtime and enhance the reliability and...

CVAD Workspace App (Windows, MAC, Linux)

Introduction This article is a summary of the top support articles related to CVAD Workspace App Windows, MAC, Linux Overview of the Issue Provide a brief yet comprehensive overview of the issue, outlining the common challenges and key points that will be addressed in detail in the linked content...

Error ID: XDDS:A75A86BB When Adding Machines to a Streamed Catalog Error Occurs

While adding machines to a streamed catalog, wizard shows the error“The virtual machine with MAC address xx:xx:xx:xx:xx:xx in the selected Device Collection could not be found on any available connection”. Exception : Citrix.Console.Models.Exceptions.ScriptException The virtual machine CTX2-TTM01...