3. Consider the following C code fragment, which makes use of the strcpy version that truncates a copy after n bytes (i.e., strncpy): 1 int 2 main (int argc, char **arg v) 3 { return bar (argv [1]); 5 } 4 7 int 8 bar(char *arg) 9 { 11 char bar[512]; 12 13 if (sizeof ( bar) <= 512) strncpy (bar, arg, strlen (arg)); 14 15 exit (1); 16 17 } a. Does the program suffer from a memory corruption vulnerability? If not, explain the reasons. If yes, is it possible to successfully exploit this vulnerability? In other words, is it possible to provide specific input to such a program to take advantage of its vulnerability and thus execute arbitrary code (for instance, spawning a shell), on x86-32 architectures? If yes, explain how you would exploit it (high-level steps). If not, explain why and what you would change in the code to make it exploitable.

Database System Concepts
7th Edition
ISBN:9780078022159
Author:Abraham Silberschatz Professor, Henry F. Korth, S. Sudarshan
Publisher:Abraham Silberschatz Professor, Henry F. Korth, S. Sudarshan
Chapter1: Introduction
Section: Chapter Questions
Problem 1PE
icon
Related questions
Topic Video
Question
3. Consider the following C code fragment, which makes use of the strcpy
version that truncates a copy after n bytes (i.e., strncpy):
1 int
2 main (int argc, char **argv)
3 {
return bar(argv [1]);
5 }
4
7 int
8 bar (char *arg)
9 {
10
11
char bar[512];
12
if (sizeof ( bar) <= 512)
strncpy (bar, arg, strlen (arg ));
13
14
15
16
exit (1);
17 }
a. Does the program suffer from a memory corruption vulnerability? If
not, explain the reasons. If yes, is it possible to successfully exploit this
vulnerability? In other words, is it possible to provide specific input to
such a program to take advantage of its vulnerability and thus execute
arbitrary code (for instance, spawning a shell), on x86-32 architectures?
If yes, explain how you would exploit it (high-level steps). If not, explain
why and what you would change in the code to make it exploitable.
Transcribed Image Text:3. Consider the following C code fragment, which makes use of the strcpy version that truncates a copy after n bytes (i.e., strncpy): 1 int 2 main (int argc, char **argv) 3 { return bar(argv [1]); 5 } 4 7 int 8 bar (char *arg) 9 { 10 11 char bar[512]; 12 if (sizeof ( bar) <= 512) strncpy (bar, arg, strlen (arg )); 13 14 15 16 exit (1); 17 } a. Does the program suffer from a memory corruption vulnerability? If not, explain the reasons. If yes, is it possible to successfully exploit this vulnerability? In other words, is it possible to provide specific input to such a program to take advantage of its vulnerability and thus execute arbitrary code (for instance, spawning a shell), on x86-32 architectures? If yes, explain how you would exploit it (high-level steps). If not, explain why and what you would change in the code to make it exploitable.
Expert Solution
steps

Step by step

Solved in 2 steps

Blurred answer
Knowledge Booster
Instruction Format
Learn more about
Need a deep-dive on the concept behind this application? Look no further. Learn more about this topic, computer-science and related others by exploring similar questions and additional content below.
Similar questions
Recommended textbooks for you
Database System Concepts
Database System Concepts
Computer Science
ISBN:
9780078022159
Author:
Abraham Silberschatz Professor, Henry F. Korth, S. Sudarshan
Publisher:
McGraw-Hill Education
Starting Out with Python (4th Edition)
Starting Out with Python (4th Edition)
Computer Science
ISBN:
9780134444321
Author:
Tony Gaddis
Publisher:
PEARSON
Digital Fundamentals (11th Edition)
Digital Fundamentals (11th Edition)
Computer Science
ISBN:
9780132737968
Author:
Thomas L. Floyd
Publisher:
PEARSON
C How to Program (8th Edition)
C How to Program (8th Edition)
Computer Science
ISBN:
9780133976892
Author:
Paul J. Deitel, Harvey Deitel
Publisher:
PEARSON
Database Systems: Design, Implementation, & Manag…
Database Systems: Design, Implementation, & Manag…
Computer Science
ISBN:
9781337627900
Author:
Carlos Coronel, Steven Morris
Publisher:
Cengage Learning
Programmable Logic Controllers
Programmable Logic Controllers
Computer Science
ISBN:
9780073373843
Author:
Frank D. Petruzella
Publisher:
McGraw-Hill Education