Похожие чаты

What will be happened if I change big_len to ->

UINT_MAX - 1 and little_len to UINT_MAX - 2? Still safe? Not. If you're supporting API or functionality to users, you have to give flexibility to them but not too much.

14 ответов

19 просмотров

Did you try out UINT_Max?

Cengizhan-Pasaoglu Автор вопроса
Aakash Saini
Did you try out UINT_Max?

No need to try, you're not checking that memory boundaries in your function call, you're expecting that string and string length has to be matched.

Cengizhan-Pasaoglu Автор вопроса
Cengizhan Pasaoglu
No need to try, you're not checking that memory bo...

Also, there is no NULL checking for strings in the function. So. not safe for usage, open for overflow problems.

Cengizhan Pasaoglu
No need to try, you're not checking that memory bo...

This my moby stack size! int main(void) { char string[1024*510] = "stack size"; } Beyond is stack overflow; program run fine!!

Aakash Saini
screenshot

Checkout their stack size higher than mine! I haven’t tested online! You may test.

Aakash Saini
screenshot

This checks NULL beyond string! Mapping is on elements.

Aakash Saini
screenshot

that doesn't do what you think

Aakash Saini
screenshot

start[curr_pos] Is Better than *(start+curr_pos)

Aakash Saini
screenshot

On the for you have buffer overflow in start[curr_pos+i]

Похожие вопросы

Обсуждают сегодня

Господа, а что сейчас вообще с рынком труда на делфи происходит? Какова ситуация?
Rꙮman Yankꙮvsky
29
А вообще, что может смущать в самой Julia - бы сказал, что нет единого стандартного подхода по многим моментам, поэтому многое выглядит как "хаки" и произвол. Короче говоря, с...
Viktor G.
2
@Benzenoid can you tell me the easiest, and safest way to bu.y HEX now?
Živa Žena
20
This is a question from my wife who make a fortune with memes 😂😂 About the Migration and Tokens: 1. How will the old tokens be migrated to the new $LGCYX network? What is th...
🍿 °anton°
2
30500 за редактор? )
Владимир
47
а через ESC-код ?
Alexey Kulakov
29
What is the Dex situation? Agora team started with the Pnetwork for their dex which helped them both with integration. It’s completed but as you can see from the Pnetwork ann...
Ben
1
Гайс, вопрос для разносторонее развитых: читаю стрим с юарта, нада выделять с него фреймы с определенной структурой, если ли чо готовое, или долбаться с ринг буффером? нада у...
Vitaly
9
Anyone knows where there are some instructions or discort about failed bridge transactions ?
Jochem
21
@lozuk how do I get my phex copies of my ehex from a atomic wallet, to move to my rabby?
Justfrontin 👀
11
Карта сайта