adplus-dvertising
frame-decoration

Question

What is a classic case of a trivial overflow bug?

a.

A function that receives a null-terminated string as input and copies that string into a local variable

b.

A function that performs bounds checking on incoming data

c.

A function that dynamically allocates stack space based on incoming data

d.

A function that preallocates enough room in the stack for the largest chunk of data

Posted under Reverse Engineering

Answer: (a).A function that receives a null-terminated string as input and copies that string into a local variable Explanation:A function that receives a null-terminated string as input and copies that string into a local variable is a classic case of a trivial overflow bug.

Engage with the Community - Add Your Comment

Confused About the Answer? Ask for Details Here.

Know the Explanation? Add it Here.

Q. What is a classic case of a trivial overflow bug?

Similar Questions

Discover Related MCQs

Q. What is an example of a tool that can be used to disassemble a program?

Q. How are parameters passed in cdecl functions?

Q. What is the disadvantage of the optimization chosen by the compiler for unwinding function parameters?

Q. Why does the function end up using a bit more stack space?

Q. Which type of threads in Windows have a very limited stack space?

Q. What is the disadvantage of the function's stack unwinding approach from the program's perspective?

Q. Why is it important to ensure that the code that’s accessing a large block of stack space is properly aware of its size?

Q. What are intrinsic implementations?

Q. Why are string-manipulation routines historically a reason for vulnerabilities?

Q. What is the aim of using automatic, compiler-generated stack checking?

Q. How does automatic, compiler-generated stack checking work?

Q. What is the purpose of the cookie used in stack checking?

Q. Why does the cookie used in stack checking need to be a random number?

Q. How does the use of a pseudorandom number as a cookie prevent an attacker from fooling the cookie verification code?

Q. What is stack checking?

Q. How does stack checking work?

Q. Why must the cookie be a random number in stack checking?

Q. Can stack checking completely eliminate the problem of buffer overflow bugs?

Q. How can an attacker defeat stack checking?

Q. What is nonexecutable memory?