Re:Sizeof(char) is 1
by chc on Monday September 06, 2010 @02:08AM
(#1666037)
The fact that it's strlen(params->text) is precisely why it's exploitable. If we intend to write strlen(params->text)+1 bytes and allocate less, we've set ourselves up for a buffer overrun.
[ Parent
| on HN ]