Blank trimmer

Bernie Cosell cosell at bbn.com
Thu Aug 31 22:53:49 AEST 1989


In article <358 at s1.Morgan.COM> jordan at Morgan.COM (Jordan Hayes) writes:
}Tom Neff <tneff at bfmny0.UU.NET> writes:
}
}>Xmain()
}>X{
}>X	char s[65536];		/*  whatever  */
}>X
}>X	while (gets(s) != NULL)
}
}No, this is one of those nasty hacks purists get on your case about
}because you use gets() instead of fgets() ...

Lest you mention 'purist' as if it was some kind of a dirty word, you
should look at one of the reports on the internet virus.  One of the
ways it used to penetrate systems was to take advantage of a "gets"
that should have been an 'fgets', and by sending a VERY long password
overwrote the stack, and by putting the right magic stuff on the stack
it arranged things so that it was given access as the now-bogus stack
unwound.

   __
  /  )                              Bernie Cosell
 /--<  _  __  __   o _              BBN Sys & Tech, Cambridge, MA 02238
/___/_(<_/ (_/) )_(_(<_             cosell at bbn.com



More information about the Alt.sources.d mailing list