Talk:Stack buffer overflow - Revision history

Acwilson9: /* Article should state what the language of the examples is */ new section

2025-05-14T05:16:26Z

Article should state what the language of the examples is: new section

← Previous revision		Revision as of 05:16, 14 May 2025
Line 50:		Line 50:

	Could you maybe provide a more typical scenario to educate "people like me" why stack smashing handling mechanisms is necessary? In particular, please do not provide another example that could be easily corrected to avoid the chances of such an overflow. I would really like to learn how this particular issue arises in the real world (I mean, aside from poor or lazy development processes). Thank you.[[Special:Contributions/73.90.84.55\|73.90.84.55]] ([[User talk:73.90.84.55\|talk]]) 06:24, 7 June 2017 (UTC)		Could you maybe provide a more typical scenario to educate "people like me" why stack smashing handling mechanisms is necessary? In particular, please do not provide another example that could be easily corrected to avoid the chances of such an overflow. I would really like to learn how this particular issue arises in the real world (I mean, aside from poor or lazy development processes). Thank you.[[Special:Contributions/73.90.84.55\|73.90.84.55]] ([[User talk:73.90.84.55\|talk]]) 06:24, 7 June 2017 (UTC)

			== Article should state what the language of the examples is ==

			Is it C? [[User:Acwilson9\|Acwilson9]] ([[User talk:Acwilson9\|talk]]) 05:16, 14 May 2025 (UTC)

Qwerfjkl (bot): Implementing WP:PIQA (Task 26)

2024-02-07T04:31:22Z

Implementing WP:PIQA (Task 26)

← Previous revision		Revision as of 04:31, 7 February 2024
Line 1:		Line 1:
	{{Talk header}}		{{Talk header}}
⚫	{{WikiProject Computing ~~\|class=C~~ \|importance=Mid \|security=y \|security-importance=High \|software=y \|software-importance=Mid}}
	{{dyktalk\|20 August\|2007\|entry=...that causing a '''[[stack buffer overflow]]''' is one of the oldest and most reliable methods for [[Black hat\|hackers]] to gain unauthorized access to a [[computer]]?}}		{{dyktalk\|20 August\|2007\|entry=...that causing a '''[[stack buffer overflow]]''' is one of the oldest and most reliable methods for [[Black hat\|hackers]] to gain unauthorized access to a [[computer]]?}}
			{{WikiProject banner shell\|class=C\|
		⚫	{{WikiProject Computing \|importance=Mid \|security=y \|security-importance=High \|software=y \|software-importance=Mid}}
			}}

	== Unnamed section ==		== Unnamed section ==

73.90.84.55 at 06:25, 7 June 2017

2017-06-07T06:25:23Z

← Previous revision		Revision as of 06:25, 7 June 2017
Line 43:		Line 43:

	: {{Done}}, the archived link above is fine. — [[User:Dsimic\|Dsimic]] ([[User talk:Dsimic#nobold\|talk]] \| [[Special:Contributions/Dsimic\|contribs]]) 01:12, 30 April 2016 (UTC)		: {{Done}}, the archived link above is fine. — [[User:Dsimic\|Dsimic]] ([[User talk:Dsimic#nobold\|talk]] \| [[Special:Contributions/Dsimic\|contribs]]) 01:12, 30 April 2016 (UTC)

			== Possibly the most ignorant inquiry in the world... ==
			OK, I'll admit maybe I just don't see the problem we are trying to solve. Sure stack-smashing will have awful results if the buffer is crafted just so. But the example offered here might not be the best sort of example. A simple substitution of strncpy() (or analogous) for the given strcpy() would obviate the whole stack smashing problem -- at least in this case. If it is simply a matter of preventing a "runaway" buffer copy, then this would seem to be a problem related more to the coder rather than the library/call the coder is using. Even variable input lengths can be managed, and is a very typical task most programmers have to tackle.

			Could you maybe provide a more typical scenario to educate "people like me" why stack smashing handling mechanisms is necessary? In particular, please do not provide another example that could be easily corrected to avoid the chances of such an overflow. I would really like to learn how this particular issue arises in the real world (I mean, aside from poor or lazy development processes). Thank you.[[Special:Contributions/73.90.84.55\|73.90.84.55]] ([[User talk:73.90.84.55\|talk]]) 06:24, 7 June 2017 (UTC)

Widefox: Assessment: -Computer Security; +Computing: class=C, importance=Mid, security=y, security-importance=High, software=y, software-importance=Mid (assisted)

2016-05-15T20:23:47Z

Assessment: -Computer Security; +Computing: class=C, importance=Mid, security=y, security-importance=High, software=y, software-importance=Mid (assisted)

← Previous revision		Revision as of 20:23, 15 May 2016
Line 1:		Line 1:
	{{Talk header}}		{{Talk header}}
	{{WikiProject ~~Computer Security~~ \|class=C \|importance=High}}		{{WikiProject Computing \|class=C \|importance=Mid \|security=y \|security-importance=High \|software=y \|software-importance=Mid}}
	{{dyktalk\|20 August\|2007\|entry=...that causing a '''[[stack buffer overflow]]''' is one of the oldest and most reliable methods for [[Black hat\|hackers]] to gain unauthorized access to a [[computer]]?}}		{{dyktalk\|20 August\|2007\|entry=...that causing a '''[[stack buffer overflow]]''' is one of the oldest and most reliable methods for [[Black hat\|hackers]] to gain unauthorized access to a [[computer]]?}}

Widefox: Assessment: Computer Security: class=C, importance=High (assisted)

2016-05-05T14:18:13Z

Assessment: Computer Security: class=C, importance=High (assisted)

← Previous revision		Revision as of 14:18, 5 May 2016
Line 1:		Line 1:
	{{Talk header}}		{{Talk header}}
	{{WikiProject Computer Security\|class=\|importance=}}		{{WikiProject Computer Security \|class=C \|importance=High}}
	{{dyktalk\|20 August\|2007\|entry=...that causing a '''[[stack buffer overflow]]''' is one of the oldest and most reliable methods for [[Black hat\|hackers]] to gain unauthorized access to a [[computer]]?}}		{{dyktalk\|20 August\|2007\|entry=...that causing a '''[[stack buffer overflow]]''' is one of the oldest and most reliable methods for [[Black hat\|hackers]] to gain unauthorized access to a [[computer]]?}}

Dsimic: /* External links modified */ Checked

2016-04-30T01:12:55Z

External links modified: Checked

← Previous revision		Revision as of 01:12, 30 April 2016
Line 38:		Line 38:
	When you have finished reviewing my changes, please set the ''checked'' parameter below to '''true''' or '''failed''' to let others know (documentation at {{tlx\|Sourcecheck}}).		When you have finished reviewing my changes, please set the ''checked'' parameter below to '''true''' or '''failed''' to let others know (documentation at {{tlx\|Sourcecheck}}).

	{{sourcecheck\|checked=~~false~~}}		{{sourcecheck\|checked=true}}

	Cheers.—[[User:Cyberbot II\|<sup style="color:green;font-family:Courier">cyberbot II</sup>]]<small><sub style="margin-left:-14.9ex;color:green;font-family:Comic Sans MS">[[User talk:Cyberbot II\|<span style="color:green">Talk to my owner</span>]]:Online</sub></small> 03:43, 3 April 2016 (UTC)		Cheers.—[[User:Cyberbot II\|<sup style="color:green;font-family:Courier">cyberbot II</sup>]]<small><sub style="margin-left:-14.9ex;color:green;font-family:Comic Sans MS">[[User talk:Cyberbot II\|<span style="color:green">Talk to my owner</span>]]:Online</sub></small> 03:43, 3 April 2016 (UTC)

			: {{Done}}, the archived link above is fine. — [[User:Dsimic\|Dsimic]] ([[User talk:Dsimic#nobold\|talk]] \| [[Special:Contributions/Dsimic\|contribs]]) 01:12, 30 April 2016 (UTC)

Dsimic: /* top */ Added {{Talk header}} template and a title to an unnamed section

2016-04-30T01:11:49Z

top: Added {{Talk header}} template and a title to an unnamed section

← Previous revision		Revision as of 01:11, 30 April 2016
Line 1:		Line 1:
			{{Talk header}}
	{{WikiProject Computer Security\|class=\|importance=}}		{{WikiProject Computer Security\|class=\|importance=}}
	{{dyktalk\|20 August\|2007\|entry=...that causing a '''[[stack buffer overflow]]''' is one of the oldest and most reliable methods for [[Black hat\|hackers]] to gain unauthorized access to a [[computer]]?}}		{{dyktalk\|20 August\|2007\|entry=...that causing a '''[[stack buffer overflow]]''' is one of the oldest and most reliable methods for [[Black hat\|hackers]] to gain unauthorized access to a [[computer]]?}}

			== Unnamed section ==

	The following phrase from the article is IMO suboptimal:		The following phrase from the article is IMO suboptimal:
Line 7:		Line 10:

	Even if "vectors" would be a verb that could be used that way (is it?), it feels very awkward to me. A more direct explanation without resorting to symbolisms would be better. Unfortunately I wasn't able to rephrase it in a more succint way :-/ <small>—Preceding [[Wikipedia:Signatures\|unsigned]] comment added by [[Special:Contributions/193.247.120.15\|193.247.120.15]] ([[User talk:193.247.120.15\|talk]]) 22:22, 11 September 2007 (UTC)</small><!-- Template:UnsignedIP --> <!--Autosigned by SineBot-->		Even if "vectors" would be a verb that could be used that way (is it?), it feels very awkward to me. A more direct explanation without resorting to symbolisms would be better. Unfortunately I wasn't able to rephrase it in a more succint way :-/ <small>—Preceding [[Wikipedia:Signatures\|unsigned]] comment added by [[Special:Contributions/193.247.120.15\|193.247.120.15]] ([[User talk:193.247.120.15\|talk]]) 22:22, 11 September 2007 (UTC)</small><!-- Template:UnsignedIP --> <!--Autosigned by SineBot-->


	Still if used in conjunction with techniques like ASLR a nonexecutable stack can be somewhat resistant to return to libc attacks and thus can greatly improve the security of an application.		Still if used in conjunction with techniques like ASLR a nonexecutable stack can be somewhat resistant to return to libc attacks and thus can greatly improve the security of an application.
	Given that ASLR protection has been shown to be effectively rendered useless in a few minutes (http://www.cse.ucsd.edu/~hovav/papers/sppgmb04.html), the above statement seems to be misleading -- [[User:Prashmohan\|Prashmohan]] 10:35, 31 October 2007 (UTC)		Given that ASLR protection has been shown to be effectively rendered useless in a few minutes (http://www.cse.ucsd.edu/~hovav/papers/sppgmb04.html), the above statement seems to be misleading -- [[User:Prashmohan\|Prashmohan]] 10:35, 31 October 2007 (UTC)




	The example code actually uses the second command line argument to the program since arrays in C are zero based and the index 1 is used. <small>—Preceding [[Wikipedia:Signatures\|unsigned]] comment added by [[User:Gthubron\|Gthubron]] ([[User talk:Gthubron\|talk]] • [[Special:Contributions/Gthubron\|contribs]]) 19:39, 8 April 2008 (UTC)</small><!-- Template:Unsigned --> <!--Autosigned by SineBot-->		The example code actually uses the second command line argument to the program since arrays in C are zero based and the index 1 is used. <small>—Preceding [[Wikipedia:Signatures\|unsigned]] comment added by [[User:Gthubron\|Gthubron]] ([[User talk:Gthubron\|talk]] • [[Special:Contributions/Gthubron\|contribs]]) 19:39, 8 April 2008 (UTC)</small><!-- Template:Unsigned --> <!--Autosigned by SineBot-->

Cyberbot II: Notification of altered sources needing review #IABot

2016-04-03T03:43:29Z

Notification of altered sources needing review #IABot

← Previous revision		Revision as of 03:43, 3 April 2016
Line 29:		Line 29:

	Shouldn't the return address be above (in the picture) the parameter char *bar? <span style="font-size: smaller;" class="autosigned">— Preceding [[Wikipedia:Signatures\|unsigned]] comment added by [[Special:Contributions/192.118.35.248\|192.118.35.248]] ([[User talk:192.118.35.248\|talk]]) 13:35, 24 October 2013 (UTC)</span><!-- Template:Unsigned IP --> <!--Autosigned by SineBot-->		Shouldn't the return address be above (in the picture) the parameter char *bar? <span style="font-size: smaller;" class="autosigned">— Preceding [[Wikipedia:Signatures\|unsigned]] comment added by [[Special:Contributions/192.118.35.248\|192.118.35.248]] ([[User talk:192.118.35.248\|talk]]) 13:35, 24 October 2013 (UTC)</span><!-- Template:Unsigned IP --> <!--Autosigned by SineBot-->

			== External links modified ==

			Hello fellow Wikipedians,

			I have just modified {{plural:1\|one external link\|1 external links}} on [[Stack buffer overflow]]. Please take a moment to review [https://en.wikipedia.org/w/index.php?diff=prev&oldid=713289606 my edit]. If you have any questions, or need the bot to ignore the links, or the page altogether, please visit [[User:Cyberpower678/FaQs#InternetArchiveBot\|this simple FaQ]] for additional information. I made the following changes:
			*Added archive http://web.archive.org/web/20070928100343/http://www.securityforest.com/downloads/educationtree/stack_overflows.pdf to http://www.securityforest.com/downloads/educationtree/stack_overflows.pdf

			When you have finished reviewing my changes, please set the ''checked'' parameter below to '''true''' or '''failed''' to let others know (documentation at {{tlx\|Sourcecheck}}).

			{{sourcecheck\|checked=false}}

			Cheers.—[[User:Cyberbot II\|<sup style="color:green;font-family:Courier">cyberbot II</sup>]]<small><sub style="margin-left:-14.9ex;color:green;font-family:Comic Sans MS">[[User talk:Cyberbot II\|<span style="color:green">Talk to my owner</span>]]:Online</sub></small> 03:43, 3 April 2016 (UTC)

192.118.35.248: /* Picture titled " The program stack in foo() with various inputs" */

2013-10-24T13:37:19Z

Picture titled " The program stack in foo() with various inputs"

← Previous revision		Revision as of 13:37, 24 October 2013
Line 28:		Line 28:
	== Picture titled " The program stack in foo() with various inputs" ==		== Picture titled " The program stack in foo() with various inputs" ==

	Shouldn't the return address be above (in the picture) the parameter *bar <span style="font-size: smaller;" class="autosigned">— Preceding [[Wikipedia:Signatures\|unsigned]] comment added by [[Special:Contributions/192.118.35.248\|192.118.35.248]] ([[User talk:192.118.35.248\|talk]]) 13:35, 24 October 2013 (UTC)</span><!-- Template:Unsigned IP --> <!--Autosigned by SineBot-->		Shouldn't the return address be above (in the picture) the parameter char *bar? <span style="font-size: smaller;" class="autosigned">— Preceding [[Wikipedia:Signatures\|unsigned]] comment added by [[Special:Contributions/192.118.35.248\|192.118.35.248]] ([[User talk:192.118.35.248\|talk]]) 13:35, 24 October 2013 (UTC)</span><!-- Template:Unsigned IP --> <!--Autosigned by SineBot-->

SineBot: Signing comment by 192.118.35.248 - "/* Picture titled " The program stack in foo() with various inputs" */ new section"

2013-10-24T13:36:11Z

Signing comment by 192.118.35.248 - "Picture titled " The program stack in foo() with various inputs": new section"

← Previous revision		Revision as of 13:36, 24 October 2013
Line 28:		Line 28:
	== Picture titled " The program stack in foo() with various inputs" ==		== Picture titled " The program stack in foo() with various inputs" ==

			Shouldn't the return address be above (in the picture) the parameter *bar <span style="font-size: smaller;" class="autosigned">— Preceding [[Wikipedia:Signatures\|unsigned]] comment added by [[Special:Contributions/192.118.35.248\|192.118.35.248]] ([[User talk:192.118.35.248\|talk]]) 13:35, 24 October 2013 (UTC)</span><!-- Template:Unsigned IP --> <!--Autosigned by SineBot-->
	Shouldn't the return address be above (in the picture) the parameter *bar

← Previous revision		Revision as of 01:12, 30 April 2016
Line 38:		Line 38:
	When you have finished reviewing my changes, please set the ''checked'' parameter below to '''true''' or '''failed''' to let others know (documentation at {{tlx\|Sourcecheck}}).		When you have finished reviewing my changes, please set the ''checked'' parameter below to '''true''' or '''failed''' to let others know (documentation at {{tlx\|Sourcecheck}}).

	{{sourcecheck\|checked=~~false~~}}		{{sourcecheck\|checked=true}}

	Cheers.—[[User:Cyberbot II\|<sup style="color:green;font-family:Courier">cyberbot II</sup>]]<small><sub style="margin-left:-14.9ex;color:green;font-family:Comic Sans MS">[[User talk:Cyberbot II\|<span style="color:green">Talk to my owner</span>]]:Online</sub></small> 03:43, 3 April 2016 (UTC)		Cheers.—[[User:Cyberbot II\|<sup style="color:green;font-family:Courier">cyberbot II</sup>]]<small><sub style="margin-left:-14.9ex;color:green;font-family:Comic Sans MS">[[User talk:Cyberbot II\|<span style="color:green">Talk to my owner</span>]]:Online</sub></small> 03:43, 3 April 2016 (UTC)

			: {{Done}}, the archived link above is fine. — [[User:Dsimic\|Dsimic]] ([[User talk:Dsimic#nobold\|talk]] \| [[Special:Contributions/Dsimic\|contribs]]) 01:12, 30 April 2016 (UTC)