the stack can occur. Due to the way that buffers are allocated on the stack and in bounds checking, it might not always be possible to copy enough data into a buffer to overflow far enough to overwrite the EIP.This means that there is no direct way of gaining processor control via a RET. However, there is still the potential for exploitation, even if you do not gain
One other potential problem with this is that sometimes a partial overflow
of the stack can occur. Due to the way that buffers are allocated on the stack
and in bounds checking, it might not always be possible to copy enough data
into a buffer to overflow far enough to overwrite the EIP.This means that there
is no direct way of gaining processor control via a RET. However, there is still
the potential for exploitation, even if you do not gain direct EIP control.You
may be writing over some important data on the stack that are later used by the
leverage this and change things enough to take control of the program later or
just change the program’s operation to do something completely different than
its original intent.
The following program demonstrates a classic case of the off-by-one error:
Step by step
Solved in 3 steps
