Re: [Format String vulnerabilities]

[Frank Knobbe <frank () knobbe us>]

On Sat, 2004-05-22 at 07:48, auto198368 () hushmail com wrote:
> (taken from NN-formats.txt [NOP Ninjas - Format String Technique])
> fmt1.c ----------------------------------------------------
>
> int main(int argc, char *argv[]) {
>   char buf[1024];
>
>   strncpy(buf, argv[1], sizeof(buf));
>   printf(argv[1]);          
>   printf("\n");
> }
> ------------------------------------------------------------  


It's funny that examples of certain vulnerabilities even include
unintended other vulnerabilities, such as the potentially unterminated
buffer above.

-Frank

Attachment: signature.asc
Description: This is a digitally signed message part