When Zero Minus One Is Four Billion: Three Unauthenticated DoS Bugs in facil.io
Three unauthenticated denial-of-service bugs in facil.io's hand-written HTTP and multipart parsers, all the same shape: a value that is correct where it is computed and wrong by the time someone uses it.