Michael Howard's Spot the security bug problem.

Collapse
This topic is closed.
X
X
 
  • Time
  • Show
Clear All
new posts
  • Mugunth

    #1

    Michael Howard's Spot the security bug problem.

    Do anyone know the answer to this problem?

    Int16 req;
    ....
    while (true) {
    getRequest();
    req++;
    arr[req] = DateTime.Now;
    }

    Can you spot this code flaw?

    From this link...
    http://msdn2.microsoft.com/en-us/library/ms972827.aspx

    -
    Mugunth
  • Mufaka

    #2
    Re: Michael Howard's Spot the security bug problem.

    I don't know if we really have enough info, but index 0 *appears* to be
    skipped.

    while (true) {
    getRequest();
    arr[req] = DateTime.Now;
    req++;
    }

    Mugunth wrote:
    Do anyone know the answer to this problem?
    >
    Int16 req;
    ...
    while (true) {
    getRequest();
    req++;
    arr[req] = DateTime.Now;
    }
    >
    Can you spot this code flaw?
    >
    From this link...
    http://msdn2.microsoft.com/en-us/library/ms972827.aspx
    >
    -
    Mugunth

    Comment

    Working...