int bof (char *str) { } Draw a function stack frame for the following C function. char buffer[24]; strcpy (buffer, str); return 1; Question 2: Why does ASLR make buffer-overflow attack more difficult? [35 points] Question 3: The buffer overflow example was fixed as below. Is this safe? Why or why not? [35point] } int bof (char *str, int size) { char buffer= (char*) malloc (size); strcpy (buffer, str); return 1;