Weekly Edition
Return to the Security page
| |||||||||||||
|
| |||||||||||||
Countering buffer overflows (developerWorks)
David A. Wheeler talks
about preventing buffer overflow vulnerabilities on the developerWorks
site. "This article first explains what buffer overflows are and why
they're both so common and so dangerous. It then discusses the new Linux
and UNIX methods for broadly countering them -- and why these methods are
not enough. It then shows various ways to counter buffer overflows in C/C++
programs, both statically-sized approaches (such as the standard C library
and OpenBSD/strlcpy solution) and dynamically-sized solutions, as well as
some tools to help you. Finally, the article closes with some predictions
on the future of buffer overflow vulnerabilities."
(Log in to post comments)
|
|
||||||||||||