1. (10 Points) The following program has two security-critical vulnerabilities. 1 void get name (char prompt,...

Transcribed Image Text:

1. (10 Points) The following program has two security-critical vulnerabilities. 1 void get name (char prompt, char greeting) | printf(prompt); int fd 0; // stdin char buf greeting strlen (greeting); // remaining buffer size_t count sizeof(greeting) strlen (greeting); // size left 6 read (fd, buf, count); 7) 10 11 12 13 int main() { char prompt [] Please enter your name: "; char greeting [64] "Welcome back, "; get_name (prompt, greeting); printf(greeting): Identify the two security-critical vulnerabilities in the code. For each vulnerability, provide the line number and a short explanation. 1. (10 Points) The following program has two security-critical vulnerabilities. 1 void get name (char prompt, char greeting) | printf(prompt); int fd 0; // stdin char buf greeting strlen (greeting); // remaining buffer size_t count sizeof(greeting) strlen (greeting); // size left 6 read (fd, buf, count); 7) 10 11 12 13 int main() { char prompt [] Please enter your name: "; char greeting [64] "Welcome back, "; get_name (prompt, greeting); printf(greeting): Identify the two security-critical vulnerabilities in the code. For each vulnerability, provide the line number and a short explanation.