News for hackers. Stuff that matters.
Re:Sizeof(char) is 1 by chc on Monday September 06, 2010 @02:08AM (#1666037)
The fact that it's strlen(params->text) is precisely why it's exploitable. If we intend to write strlen(params->text)+1 bytes and allocate less, we've set ourselves up for a buffer overrun.
Re:Sizeof(char) is 1 by masklinn on Monday September 06, 2010 @05:32AM (#1666330)
But that has nothing to do with the sizeof(). It's a completely independent issue.