OpenBSD fixes OpenAI-reported pty UAF, rejects their 'batshit crazy' patch

jedisct1 · x · 2026-11-10

An OpenBSD source commit by Theo de Raadt disallows TIOCSCTTY, TIOCNOTTY, and TIOCSPGRP on the pty master (returning ENOTTY for all three), as they could create incoherent session states leading to a dangerous use-after-free reported by OpenAI.

The commit message adds a pointed jab: OpenAI's proposed patch was "batshit crazy" — it failed to identify the root cause and instead wrote code to support the broken condition, making things worse. The retweet frames it as a lesson in why patch review by real humans matters.

Original post →

More from Fun

Fun channel →