C++bug
sam20151111sam
这个作者很懒,什么都没留下…
展开
-
CWE-134: Uncontrolled Format String
http://cwe.mitre.org/data/definitions/134.htmlExample 2The following code copies a command line argument into a bufferusing snprintf().(Bad Code)ExampleLanguage:C int main(in转载 2015-06-25 21:57:49 · 795 阅读 · 0 评论 -
CWE-908: Use of Uninitialized Resource
http://cwe.mitre.org/data/definitions/908.htmlThe following code intends to concatenate a string to a variable andprint the string.(Bad Code)ExampleLanguage:C char str[20];st转载 2015-06-25 14:10:27 · 441 阅读 · 0 评论 -
CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
cwe.mitre.org/data/definitions/362.htmlExample 2The following function attempts to acquire a lock in order toperform operations on a shared resource.(Bad Code)ExampleLanguage:C转载 2015-06-25 20:15:31 · 864 阅读 · 0 评论 -
CWE-234: Failure to Handle Missing Parameter
http://cwe.mitre.org/data/definitions/234.htmlExample 1(Bad Code)Example Languages:C and C++ foo_funct(one, two);...void foo_funct(int one, int two, int three) {p转载 2015-06-25 20:41:16 · 383 阅读 · 0 评论 -
CWE-681: Incorrect Conversion between Numeric Types
http://cwe.mitre.org/data/definitions/681.html函数的返回类型跟定义类型不一致!导致返回被隐蔽的转换!In this example, depending on the return value ofaccecssmainframe(), the variable amount can hold a negative value when转载 2015-06-24 20:45:34 · 442 阅读 · 0 评论 -
CWE-193: Off-by-one Error
http://cwe.mitre.org/data/definitions/193.html转载 2015-06-26 14:21:50 · 613 阅读 · 0 评论 -
CWE-469: Use of Pointer Subtraction to Determine Size
http://cwe.mitre.org/data/definitions/469.htmlExample 1The following example contains the method size that is used todetermine the number of nodes in a linked list. The method is passed转载 2015-06-26 20:50:22 · 475 阅读 · 0 评论 -
字体漏洞
http://netsecurity.51cto.com/art/201507/483503.htm转载 2015-07-08 23:21:29 · 1322 阅读 · 0 评论