Security Basics mailing list archives

Testing boundaries


From: "Alex Fiuvertiz" <fiuvertiz () gmail com>
Date: Thu, 7 Feb 2008 12:37:19 +0100

Hi there,

I have begun reading about buffer overflows and how they work. I find
it giving me a good understanding about
how computer memory is organized and accessed and of course a good training.
Now I thought I´d begin practising with testing my own old C programs
that accept input from the user from stdin.
I now there are some gaps in the code I wrote once.

Can I use some of the "fuzzy" applications that are out there for
testing my own binaries (do I have to compile the source code with
some special compiler or is there a way to test bounderies straight
against the binary)?

Is there other specific C boundery check programs out there that I
should begin with?
Of course I can just enter a lot of A:s and so on, for example with
som perl one liners, but I want to now if there are some automated
tests I can use instead?

Thank you very much in advance, Alex


Current thread: