Re: Writing Secure code

On Fri, 27 Dec 2002 12:46:05 EST, Jeremy Epstein <jepstein@webmethods.com> said:

> main() { exit(0); }

Wrong.

If you don't link it statically, it's vulnerable to a shared library replacement of the exit() function in libc. This type of error is the basis of all the LD_* exploits.

-- 
				Valdis Kletnieks
				Computer Systems Senior Engineer
				Virginia Tech