Top "Fortify-source" questions

Buffer overflow works in gdb but not without it

I am on CentOS 6.4 32 bit and am trying to cause a buffer overflow in a program. Within GDB it works. …

c security buffer-overflow fortify-source memory-safety

sprintf function's buffer overflow?

{ char buf[8]; sprintf(buf,"AAAA%3s","XXXXXXXX"); printf("%s\n",buf); } What will happen? The buffer has 8 characters worth of …

c printf overflow fortify-source

What is a buffer overflow and how do I cause one?

I have heard about a buffer overflow and I would like to know how to cause one. Can someone show …

c++ buffer-overflow fortify-source

How to prevent memcpy buffer overflow?

There are some binary buffer with fixed size in a program that are used to store data. And memcpy is …

c memcpy buffer-overflow fortify-source

Fortify integration with Maven - install

I want to run a Fortify scan against a Maven Eclipse project. Where should I start? I understand that I …

java eclipse maven fortify fortify-source

Causing a buffer Overflow with fgets

I'm experimenting with buffer overflows and try to overwrite the return address of the stack with a certain input of …

c buffer overflow stack-overflow fortify-source

Buffer Overflow Vulnerability Lab problems

I have a lab assignment that I am stuck on. Basically, I have to take advantage of a buffer overflow …

c security buffer-overflow fortify-source

GCC how to detect stack buffer overflow

Since there is an option -fstack-protector-strong in gcc to detect stack smashing. However, it can not always detect stack buffer …

c gcc buffer-overflow fortify-source

Fortify fix for Often Misused Authentication

When I do scan using fortify I have got vulnerabilities like "Often Misused: Authentication" at the below code. For this …

java fortify fortify-source

How can I invoke buffer overflow?

I got a homework assignment asking me to invoke a function without explicitly calling it, using buffer overflow. The code …

c pointers stack-trace buffer-overflow fortify-source