Integer overflow is another overflow vulnerability. Consider the following C code, which illustrates an integer overflow....

 

Transcribed Image Text:

Integer overflow is another overflow vulnerability. Consider the following C code, which illustrates an integer overflow. int copy something (char *buf, int len) { char kbuf [800] ; if (len sizeof(kbuf)) { return -1; } return memcpy(kbuf, buf, len); } (1) What is the potential problem with this code? Hint: The last argument to the func- tion memcpy is interpreted as an unsigned integer. (2) Explain how an integer overflow might be exploited by Trudy. Integer overflow is another overflow vulnerability. Consider the following C code, which illustrates an integer overflow. int copy something (char *buf, int len) { char kbuf [800] ; if (len sizeof(kbuf)) { return -1; } return memcpy(kbuf, buf, len); } (1) What is the potential problem with this code? Hint: The last argument to the func- tion memcpy is interpreted as an unsigned integer. (2) Explain how an integer overflow might be exploited by Trudy.