Re: [Format String vulnerabilities]

On Sat, 2004-05-22 at 07:48, auto198368_at_hushmail.com wrote:
> (taken from NN-formats.txt [NOP Ninjas - Format String Technique])
> fmt1.c ----------------------------------------------------
>
> int main(int argc, char *argv[]) {
> char buf[1024];
>
> strncpy(buf, argv[1], sizeof(buf));
> printf(argv[1]);
> printf("\n");
> }
> ------------------------------------------------------------

It's funny that examples of certain vulnerabilities even include
unintended other vulnerabilities, such as the potentially unterminated
buffer above.

-Frank