From: Carlos Agarie Date: 2012-11-07T13:05:45+09:00 Subject: Re: Type confusion: Java vs. Ruby --f46d043c7ace183ae004cddfd548 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: quoted-printable I'm sorry, but I don't know much about it. In any case, you might find the ruby source code useful: https://github.com/ruby/ruby ----- Carlos Agarie Control engineering student Polytechnic School University of S=E3o Paulo 2012/11/6 Regina George > Preface: this is my first day using Ruby > > Today in my computer security class, we talked about Java type confusion > attacks (if you're unfamiliar, there is a really great article here: > http://www.securingjava.com/chapter-five/chapter-five-7.html). > Basically, when Java references an object, it's actually using a pointer > to the object in memory, and the pointer has a tag referencing the type > of object it refers to. This type confusion attack is when two pointers > are created to the same object with incompatible types, which confuses > the Java system. > > Now, like I said, this is my first day in Ruby. I've seen it in scripts, > but very briefly. However, I'm pretty sure that variables in Ruby don't > have types, but I do know that Ruby uses a dynamic type system for > objects. As far as the language goes, that's really all I know. I > definitely see some similarities between Ruby and Java, but not enough > to create a stance on this topic. > > Our challenge was to find out if type confusion was possible in other > languages, and my group got assigned Ruby. Can anyone offer some insight > or point to some resources? > > -- > Posted via http://www.ruby-forum.com/. > > --f46d043c7ace183ae004cddfd548 Content-Type: text/html; charset=ISO-8859-1 Content-Transfer-Encoding: quoted-printable I'm sorry, but I don't know much about it. In any case, you might f= ind the ruby source code useful:

https://github.com/ruby/ruby

-----

Carlos Agarie
Control engineering stud= ent

Polytechnic School
University of S=E3o Paulo

2012/11/6 Regina George <lists@ruby-= forum.com>

Preface: this is my first day using Ruby

Today in my computer security class, we talked about Java type confusion attacks (if you're unfamiliar, there is a really great article here: http://www.securingjava.com/chapter-five/chapter-five-7.htm= l).
Basically, when Java references an object, it's actually using a pointe= r
to the object in memory, and the pointer has a tag referencing the type
of object it refers to. This type confusion attack is when two pointers
are created to the same object with incompatible types, which confuses
the Java system.

Now, like I said, this is my first day in Ruby. I've seen it in scripts= ,
but very briefly. However, I'm pretty sure that variables in Ruby don&#= 39;t
have types, but I do know that Ruby uses a dynamic type system for
objects. As far as the language goes, that's really all I know. I
definitely see some similarities between Ruby and Java, but not enough
to create a stance on this topic.

Our challenge was to find out if type confusion was possible in other
languages, and my group got assigned Ruby. Can anyone offer some insight or point to some resources?

--
Posted via http://= www.ruby-forum.com/.

--f46d043c7ace183ae004cddfd548--