Researchers formally verified a multi-generation garbage collector in Rocq+VST, written in C and compatible with OCaml data types. The verification uses a modular API specification independent of implementation details, demonstrating adequacy through verified client programs and supporting components like forwarding functions.
A security researcher exploited a public Linux kernel bug in Google's kernelCTF challenge by manipulating CPU TLB shootdown behavior to maintain a stale memory mapping, then convinced the kernel to recycle the underlying physical page as a page table, ultimately gaining control to retrieve the flag. The exploit leveraged existing public vulnerability details rather than discovering a new bug.
A developer who ported a TypeScript system to GDScript shares a detailed analysis of the language's strengths, weaknesses, and design choices. GDScript was purpose-built for game development in Godot, offering native game-dev types, no garbage collector, first-class signals, and tight engine integration, though it has trade-offs in performance and feature completeness compared to general-purpose languages.
Operating system developer debugged a critical type size discrepancy where unsigned long was 32 bits on their custom OS but 64 bits on Linux, causing timing functions to fail. After switching to explicit u32 and u64 typedefs and enhancing utility functions like itoa, memset overloads, and a newline-aware print function, the issue was resolved.