Question: Consider the following C code fragment. We have a server program that uses this fragment once to process user input (both input and i are
Consider the following C code fragment. We have a server program that uses this fragment once to process user input (both input and i are provided by unprivileged users). We compile the server program in a 32-bit operating system, in which the type of int, memory address, and registers, such as EIP, EBP, as well as ESP, are represented by 32 bits.
void foo(int i, int *input){
int *arr[10];
arr[i] = input;
}
Will the StackGuard approach be able to detect this attack? Please justify.
Step by Step Solution
There are 3 Steps involved in it
Get step-by-step solutions from verified subject matter experts
