⬇ Download holy card: ·
Saint Crowbleed, Who Served Leftover Memory
Patron of small C++ web servers, static files served in haste, and buffers never zeroed.
Life
On 23 September 2022 Gynvael Coldwind described Crowbleed, a flaw in the Crow web framework for C++. When serving a static file smaller than 16 KB, the library could reveal uninitialised data left in stack memory: alongside the requested page went fragments of what the server had processed just before. A close relative of the many "-bleed" flaws.
Prayer
O Saint Crowbleed, who garnish every file with a side of memory, teach our servers the worth of the zeroed buffer. Amen.
How to celebrate
Celebrated by updating Crow to a fixed version and zeroing buffers before sending them over the wire.
Small file, side of memory.