Download presentation
Presentation is loading. Please wait.
1
Software and Software Vulnerabilities
2
Synopsis Array overflows Stack overflows String problems Pointer clobbering. Dynamic memory management Integer arithmetic problems Formatted Output Output File I/O Others (the cwe.mitre.org taxonomy)
3
Arrays Array are data groupings; they are numbered sequentially. The programmer refers to them through a number (constant) or a variable (datum). The trouble is, sometimes the data doesn't have the value you expect..
4
Array overflows If you are referencing an array, are outside the array, and are modifying the array, you are really modifying something else: among the possibilities are: Other data, Instructions, pointers
5
Stack overflows A stack is a special kind of array in that it is implemented in an array; the problem may be because you tro to store too much data in the stack.
6
Strings Strings are sequences of characters. They are either terminated by a special character (common) or their length is indicated somewhere (less common).
7
String problems String termination Off-by-one errors Buffer and input overflows Code injection Arc injection
8
Pointers
9
Pointer clobbering.
10
Dynamic memory management
12
Integer arithmetic problems
14
Formatted Output Output
16
File I/O
18
Others (the cwe.mitre.org taxonomy)
Similar presentations
© 2025 SlidePlayer.com. Inc.
All rights reserved.