You accidentally write a buggy program containing the following code. 1 #include 2 #include 3 #include 4 #include 5 6 #define NPROCS 11 7 8 int 9 main(int argc, char **argv) 10 { pid_t cpid [NPROCS]; 11 12 for (int i = 0; i != NPROCS; ++i) %3D 13 { cpid [i++] = fork(); 14 %3D 15 if (cpid [i] -1) exit(EXIT_FAILURE); 3%3D 16 if (cpid [i] == 0) { ... } /* child logic else { ... } /* parent logi 17 18 } 19 exit(0); 20 } What security hazard(s) does this program definitely contain? Select all that apply. Select one or more: a. denial of service (risk to system availability) b. buffer overflow (risk of privilege escalation) С. confused deputy (risk of privilege escalation)

Computer Networking: A Top-Down Approach (7th Edition)
7th Edition
ISBN:9780133594140
Author:James Kurose, Keith Ross
Publisher:James Kurose, Keith Ross
Chapter1: Computer Networks And The Internet
Section: Chapter Questions
Problem R1RQ: What is the difference between a host and an end system? List several different types of end...
icon
Related questions
Question

Could you help me with this question

You accidentally write a buggy program containing the
following code.
1 #include <sys/wait.h>
2 #include <stdlib.h>
3 #include <unistd.h>
4 #include <stdio.h>
6 #define NPROCS 11
7
8 int
9 main(int argc, char *kargv)
10 {
11
pid_t cpid[NPROCS];
12
for (int i = 0; i != NPROCS; ++i)
13
{
14
cpid [i++] =
fork();
15
if (cpid[i]
== -1) exit(EXIT_FAILURE);
if (cpid[i]
0) { ... }
} /* child logic f
16
==
else { ... }
/* parent logic
17
18
}
19
exit(0);
20 }
What security hazard(s) does this program definitely
contain? Select all that apply.
Select one or more:
denial of service (risk to system availability)
b. buffer overflow (risk of privilege escalation)
C.
confused deputy (risk of privilege escalation)
Transcribed Image Text:You accidentally write a buggy program containing the following code. 1 #include <sys/wait.h> 2 #include <stdlib.h> 3 #include <unistd.h> 4 #include <stdio.h> 6 #define NPROCS 11 7 8 int 9 main(int argc, char *kargv) 10 { 11 pid_t cpid[NPROCS]; 12 for (int i = 0; i != NPROCS; ++i) 13 { 14 cpid [i++] = fork(); 15 if (cpid[i] == -1) exit(EXIT_FAILURE); if (cpid[i] 0) { ... } } /* child logic f 16 == else { ... } /* parent logic 17 18 } 19 exit(0); 20 } What security hazard(s) does this program definitely contain? Select all that apply. Select one or more: denial of service (risk to system availability) b. buffer overflow (risk of privilege escalation) C. confused deputy (risk of privilege escalation)
Expert Solution
steps

Step by step

Solved in 2 steps

Blurred answer
Recommended textbooks for you
Computer Networking: A Top-Down Approach (7th Edi…
Computer Networking: A Top-Down Approach (7th Edi…
Computer Engineering
ISBN:
9780133594140
Author:
James Kurose, Keith Ross
Publisher:
PEARSON
Computer Organization and Design MIPS Edition, Fi…
Computer Organization and Design MIPS Edition, Fi…
Computer Engineering
ISBN:
9780124077263
Author:
David A. Patterson, John L. Hennessy
Publisher:
Elsevier Science
Network+ Guide to Networks (MindTap Course List)
Network+ Guide to Networks (MindTap Course List)
Computer Engineering
ISBN:
9781337569330
Author:
Jill West, Tamara Dean, Jean Andrews
Publisher:
Cengage Learning
Concepts of Database Management
Concepts of Database Management
Computer Engineering
ISBN:
9781337093422
Author:
Joy L. Starks, Philip J. Pratt, Mary Z. Last
Publisher:
Cengage Learning
Prelude to Programming
Prelude to Programming
Computer Engineering
ISBN:
9780133750423
Author:
VENIT, Stewart
Publisher:
Pearson Education
Sc Business Data Communications and Networking, T…
Sc Business Data Communications and Networking, T…
Computer Engineering
ISBN:
9781119368830
Author:
FITZGERALD
Publisher:
WILEY