Name:
Anonymous
2013-04-11 3:21
#include <string.h>
void foo (char *bar)
{
char c[12];
strcpy(c, bar); // no bounds checking...
}
int main (int argc, char **argv)
{
foo(argv[1]);
}
Name:
Anonymous
2013-04-11 3:36
EEEEH EEEEEEEEH EEEEEEEEEEEEEEEEEH EEEEEEEEEEEEEEEEEEEEEEH EEEEEEEEEEEEEEEEEEEEEEEEEEEEH!
Name:
Anonymous
2013-04-11 18:48
>implying any OS worth a damn doesn't have safeguards against such an obvious exploit
Name:
Anonymous
2013-04-11 18:50
if(strlen(argv[1]) > MAX_ARG_LENGTH)
die("argument too long\n");
Name:
Anonymous
2013-04-11 19:58
only a mental midget would write such code anyway
Name:
Anonymous
2013-04-11 20:34
>>6
come up with a new and better insult KIDDO
Name:
Anonymous
2013-04-11 20:52
>>7
only a metal mindget would write such post anyway