Rogach

## xz-backdoor.md

      
              1 file
            
          
              62 forks
            
          
              563 comments
            
          
              1287 stars
            
          
                thesamesam
                / xz-backdoor.md
            
            
              Last active
              April 30, 2024 13:31
            
              
                xz-utils backdoor situation (CVE-2024-3094)
              
          
    FAQ on the xz-utils backdoor (CVE-2024-3094)

This is a living document. Everything in this document is made in good
faith of being accurate, but like I just said; we don't yet know everything
about what's going on.
Background

On March 29th, 2024, a backdoor was discovered in
xz-utils, a suite of software that

  
## ScalaEnum.scala
trait Enum { //DIY enum type
  import java.util.concurrent.atomic.AtomicReference //Concurrency paranoia

  type EnumVal <: Value //This is a type that needs to be found in the implementing class

  private val _values = new AtomicReference(Vector[EnumVal]()) //Stores our enum values

  //Adds an EnumVal to our storage, uses CCAS to make sure it's thread safe, returns the ordinal
  private final def addEnumVal(newVal: EnumVal): Int = { import _values.{get, compareAndSet => CAS}
    val oldVec = get
	trait Enum { //DIY enum type
	import java.util.concurrent.atomic.AtomicReference //Concurrency paranoia

	type EnumVal <: Value //This is a type that needs to be found in the implementing class

	private val _values = new AtomicReference(Vector[EnumVal]()) //Stores our enum values

	//Adds an EnumVal to our storage, uses CCAS to make sure it's thread safe, returns the ordinal
	private final def addEnumVal(newVal: EnumVal): Int = { import _values.{get, compareAndSet => CAS}
	val oldVec = get