Re: Administrivia: List Announcement

Benjamin A. Okopnik disse:

> l1 = strlen(p1);

I think that there we need to code:

> l1 = strlen(buf1);
> s1 = sizeof(buf1);
> l2 = strlen(buf2);
> s2 = sizeof(buf2);

but, I coded and the results:
# ./a.out `perl -e 'print "A" x 251;print " "; print "B" x 251'` strlen1: 251 sizeof1: 4
strlen2: 251 sizeof2: 4
# ./a.out `perl -e 'print "A" x 252;print " "; print "B" x 251'` strlen1: 254 sizeof1: 4
strlen2: 251 sizeof2: 4
# ./a.out `perl -e 'print "A" x 253;print " "; print "B" x 251'` Segmentation fault
# ./a.out `perl -e 'print "A" x 252;print " "; print "B" x 252'` strlen1: 254 sizeof1: 4
strlen2: 254 sizeof2: 4
# ./a.out `perl -e 'print "A" x 251;print " "; print "B" x 252'` strlen1: 251 sizeof1: 4
strlen2: 254 sizeof2: 4
# ./a.out `perl -e 'print "A" x 252;print " "; print "B" x 253'` strlen1: 254 sizeof1: 4
strlen2: 254 sizeof2: 4
# ./a.out `perl -e 'print "A" x 252;print " "; print "B" x 254'` strlen1: 254 sizeof1: 4
strlen2: 254 sizeof2: 4
# ./a.out `perl -e 'print "A" x 252;print " "; print "B" x 255'` strlen1: 254 sizeof1: 4
strlen2: 254 sizeof2: 4

mmm... it seems that buf2 overflowed 2 bytes. try other sizes for SIZE. I have tried 248 and 250. it's amazing that doesn't sigfaults. seems a very special condition.

Edinelson Keiji Shimokawa.
A jedi prentice owned by Dark Force.  

-- 
POP. Nem parece internet grátis. 

Seja POP você também!
Acesse: 
http://www.pop.com.br/pop_discador.php e baixe o POPdiscador.

Do you need help?

In addition to our free technical library, Pantek provides professional IT services to companies who utilize Open Source software: Learn more about Pantek's Technical Support offerings Place an order for 24/7/365 Technical Support here Learn more about Pantek, who we are, and what we do Chat with a Live Operator Related securityfocus.com Links bugtraq certification focus-bsd focus-ids focus-ih focus-linux focus-ms focus-sun focus-unix-other focus-virus forensics incidents libnet linux-secnews ms-secnews pen-test secpapers secprog sectools secureshell security-basics securityjobs sf-news vuln-dev webappsec Request more information about Pantek