로그인

검색

C/C++
2013.07.28 02:42

Buffer Overrun

MoA
조회 수 3514 추천 수 0 댓글 0
?

단축키

Prev이전 문서

Next다음 문서

크게 작게 위로 아래로 게시글 수정 내역 댓글로 가기 인쇄
?

단축키

Prev이전 문서

Next다음 문서

크게 작게 위로 아래로 게시글 수정 내역 댓글로 가기 인쇄
How does one patch or prevent a BufferOverRun??

From the start - don't stuff more bytes into a buffer than it can hold.

More specifically (this applies to C/C++; a lot of these problems don't occur in other languages):

  • If writing code in C++, use the string class rather than char[] for strings whenever performance isn't a priority.
  • Never use gets() -- always use fgets()
  • Never use sprintf(), use snprintf() instead
  • Never use strcpy(), use strncpy() instead
  • Never use strcat(), use strncat() instead
  • Never use printf (foo) to print a raw string; always use printf ("%s", foo). Especially important if foo is a string generated by a user. One class of attacks is to embed nasty formatting controls (like %n) in a string, trying to cause a buffer overflow. (See FormatStringVulnerability?)
  • If you have to use char[] rather than string, keep track of your buffer lengths.
  • Never assume a 4K or other size buffer is "long enough"... chances are it won't be.
  • Use dynamic char buffers, and DoubleAfterFull to maintain good performance.

The best way to avoid buffer overruns and the related list overruns and list jams is to make a religion of testing your boundary conditions, testing your boundary assumptions and, most important, any programmer whose code allows them should be subjected to the most severe ridicule and humiliation the team's culture will allow. Dunce caps are easy to make and very effective.


위키링크 추가 http://en.wikipedia.org/wiki/Buffer_overflow

?

  1. Programming 게시판 관련

    Date2014.11.01 CategoryTool/etc ByMoA Views15452
    read more
  2. 서비스중인 게임 DB 설계(쿠키런) 기초

    Date2016.07.12 CategoryDatabase ByMoA Views3196
    Read More
  3. C, C++ 에서의 불(bool, boolean) 타입의 동작

    Date2013.07.28 CategoryC/C++ ByMoA Views3193
    Read More
  4. Visual Studio Debug Tips

    Date2013.02.19 CategoryTool/etc ByMoA Views3183
    Read More
  5. Boost c++ Libraries (설명, 정리)

    Date2012.08.02 CategorySTL/Boost ByNaya Views3171
    Read More
  6. 2048게임 높은 점수 얻기 위한 알고리즘

    Date2014.03.29 CategoryAlgorithm ByMoA Views3153
    Read More
  7. 코드 실행 시간 계산

    Date2012.08.02 CategoryC/C++ ByNaya Views3122
    Read More
  8. [첫게임 만들기] 5. 적을 생성하자

    Date2013.11.21 CategoryPython ByMoA Views3121
    Read More
  9. 슬라이더 컨트롤에 툴팁 삽입 (동적 툴팁)

    Date2013.10.28 CategoryAPI/MFC ByMoA Views3117
    Read More
  10. [액션게임 만들기] 8. 캐릭터 액션 구현 1

    Date2014.05.07 CategoryPython ByMoA Views3115
    Read More
  11. 비베의 MSCOMM.OCX VC++에서 불러쓰기

    Date2013.07.28 CategoryAPI/MFC ByMoA Views3113
    Read More
  12. 소스 공유 사이트

    Date2012.08.02 CategorySite ByNaya Views3105
    Read More
  13. 디자인 패턴 정리

    Date2011.09.21 CategorySite By너울 Views3101
    Read More
  14. Binary 데이터 저장 by Google

    Date2013.07.28 CategoryC/C++ ByMoA Views3099
    Read More
  15. 비트연산자

    Date2013.07.28 CategoryC/C++ ByMoA Views3082
    Read More
  16. C++의 새로운 표준, C++0x에서 C++11으로

    Date2011.10.15 CategoryC/C++ By너울 Views3076
    Read More
  17. 쿠버네티스 클러스터

    Date2022.11.11 CategoryTool/etc ByOBG Views3072
    Read More
  18. [GUI] Tkinter, wxPython

    Date2013.11.27 CategoryPython ByMoA Views3070
    Read More
  19. RAND_MAX

    Date2014.01.19 CategoryC/C++ ByMoA Views3068
    Read More
  20. Embedding Python in C/C++

    Date2013.12.23 CategoryPython ByMoA Views3064
    Read More
  21. SciPy and NumPy

    Date2013.12.23 CategoryPython ByMoA Views3061
    Read More
Board Pagination Prev 1 ... 3 4 5 6 7 8 9 10 11 12 ... 15 Next
/ 15