로그인

검색

C/C++
2013.07.28 02:42

Buffer Overrun

MoA
조회 수 3520 추천 수 0 댓글 0
?

단축키

Prev이전 문서

Next다음 문서

크게 작게 위로 아래로 게시글 수정 내역 댓글로 가기 인쇄
?

단축키

Prev이전 문서

Next다음 문서

크게 작게 위로 아래로 게시글 수정 내역 댓글로 가기 인쇄
How does one patch or prevent a BufferOverRun??

From the start - don't stuff more bytes into a buffer than it can hold.

More specifically (this applies to C/C++; a lot of these problems don't occur in other languages):

  • If writing code in C++, use the string class rather than char[] for strings whenever performance isn't a priority.
  • Never use gets() -- always use fgets()
  • Never use sprintf(), use snprintf() instead
  • Never use strcpy(), use strncpy() instead
  • Never use strcat(), use strncat() instead
  • Never use printf (foo) to print a raw string; always use printf ("%s", foo). Especially important if foo is a string generated by a user. One class of attacks is to embed nasty formatting controls (like %n) in a string, trying to cause a buffer overflow. (See FormatStringVulnerability?)
  • If you have to use char[] rather than string, keep track of your buffer lengths.
  • Never assume a 4K or other size buffer is "long enough"... chances are it won't be.
  • Use dynamic char buffers, and DoubleAfterFull to maintain good performance.

The best way to avoid buffer overruns and the related list overruns and list jams is to make a religion of testing your boundary conditions, testing your boundary assumptions and, most important, any programmer whose code allows them should be subjected to the most severe ridicule and humiliation the team's culture will allow. Dunce caps are easy to make and very effective.


위키링크 추가 http://en.wikipedia.org/wiki/Buffer_overflow

?

List of Articles
번호 분류 제목 글쓴이 날짜 조회 수
공지 Tool/etc Programming 게시판 관련 2 MoA 2014.11.01 15455
118 API/MFC WaitForSingleObject와의 삽질.. MoA 2013.07.28 2965
117 API/MFC Thread Programming Naya 2012.08.02 2963
116 Deeplearning Using Machine Learning to Predict Customers’ Next Purchase Day OBG 2024.02.27 2944
115 Tool/etc Flash CS5 and Version Control MoA 2013.10.11 2942
114 Deeplearning 추천(Recommendation) 시스템 - 알고리즘 Trend 정리 OBG 2021.08.03 2942
113 Python 2048 Game in Python OBG 2022.09.22 2939
112 API/MFC VC의 소스 파일, sln파일 관리 MoA 2013.07.28 2921
111 Library CSpreadSheet MoA 2014.02.03 2911
110 Deeplearning 내 마음대로 선정한 머신러닝/딥러닝 학습 추천 서적 OBG 2023.08.14 2909
109 API/MFC MFC TIP MoA 2013.07.28 2886
108 JAVA/Android 안드로이드 어플 개발 사이트 MoA 2013.03.11 2881
107 JAVA/Android 시스템 분석을 위한 쉘 명령어 MoA 2013.05.28 2870
106 Site 이미지공학(IE) 연구실 MoA 2013.07.28 2854
105 Deeplearning 강화학습 학습 관련 정리 OBG 2022.08.10 2854
104 Site 알고리즘 정리된 블로그 MoA 2013.07.28 2851
103 Python FastAPI 톺아보기 - 부제: python 백엔드 봄은 온다 OBG 2023.01.25 2851
102 Library High-speed Charting Control MoA 2013.07.28 2831
101 API/MFC MFC로 그림 그리기 Naya 2012.08.02 2810
100 API/MFC 세마포어를 이용한 생산/소비자 Naya 2012.08.31 2802
99 Site 10 Useful/Fun/Weird Github Repos You Have to Play Around With OBG 2023.12.28 2802
Board Pagination Prev 1 ... 5 6 7 8 9 10 11 12 13 14 15 Next
/ 15