[Midwest Product]

Hello, I'm trying to find examples of simple exploitable/nonexploitable buffer overflows. Does anyone have one?

For example, would this be an exploitable buffer overflow?

Char destination[5];
char *source = "LARGER";
strcopy(destination, source);

[Salem_c]

> Hello, I'm trying to find examples of simple exploitable/nonexploitable buffer overflows
If there is any buffer overflow, then the program is screwed anyway. So can there be any case which is "non-exploitable"?

I mean, you may not be able to run arbitrary code with a carefully crafted buffer, but causing it to crash counts as denial of service.

Further, any example would be highly specific to a given implementation, and likely to be patched before most people are aware that it even existed.

[baavgai]

Yes. You crash.

To exploit an overrun, you generally want to be the one writing data into the buffer. There is then a chance you can make the program continue executing somewhere not intended.

However, all scenarios require a compiled program to abuse. All you've shown is potential for abuse.

[modi123_1]

Agreed.

Closing.