您的位置:首页 > 大数据 > 人工智能

CWE-234: Failure to Handle Missing Parameter

2015-06-25 20:41 375 查看
http://cwe.mitre.org/data/definitions/234.html

Example 1

(Bad Code)
Example Languages:
C and C++ 

foo_funct(one, two);...
void foo_funct(int one, int two, int three) {

printf("1) %d\n2) %d\n3) %d\n", one, two, three);

}

This can be exploited to disclose information with no work whatsoever.In fact, each time this function is run, it will print out the next 4bytes on the stack after the two numbers sent to it.
内容来自用户分享和网络整理,不保证内容的准确性,如有侵权内容,可联系管理员处理 点击这里给我发消息
标签: