Comment Re:Nothingburger (Score 4, Interesting) 91
I had my clanker (Qwen3.8-abliterated) try for over 10h to weaponize some of the best looking PoC with no results except crashing workers.
ASLR was the first thing that blocked it, then it tried with it disabled for that process. It did manage to reliably crash a php-fpm or apache2 process with bad input.
So yes there is a problem, bad stuff is happening in the memory management and there are bugs.
ASLR is partly to thank for making exploiting this significantly harder.
There's also a lot of things that might be tied to the specific version of glibc and other hardening aspects.