You are using an out of date browser. It may not display this or other websites correctly. You should upgrade or use an alternative browser.
marshal
About this tag
The marshal tag on WindowsForum.com covers topics related to data marshalling in programming, including serialization and deserialization for inter-process communication and data persistence. Discussions include security vulnerabilities in OCaml's Marshal deserializer that can lead to remote code execution, with patches released in versions 4.14.3 and 5.4.1. Additionally, the tag features practical examples of marshalling in C#, covering memory allocation, structure-to-pointer conversion, and unsafe code patterns. These threads provide insights into both the utility and risks of marshalling in software development.
The OCaml runtime has an urgent security fix you need to know about: a buffer over‑read in the Marshal deserializer can be abused to achieve remote code execution, and upstream maintainers have released corrective compiler/runtime updates (OCaml 4.14.3 and 5.4.1) to close the hole.
Background /...
class ShapeClass
{
public unsafe Shape* Polygon;
}
struct Shape
{
public unsafe Shape(char* name, int numsides)
{
Sides = numsides;
Name = name;
}
public unsafe char* Name;
public int Sides;
}
private unsafe void MainMethod()
{
char[] name =...
The Daily News says U.S. marshals and NYPD detectives tracked Ruben Burgos down to an apartment in Brooklyn's Bedford-Stuyvesant neighborhood Monday night, sitting at his computer with his Facebook page open.
Read Full Story: Lunchtime Links: Fugitive from Utica taunts police on Facebook to...