KeesCook: /* Examples */

2016-04-12T22:29:44Z

Examples

← Older revision		Revision as of 22:29, 12 April 2016
Line 4:		Line 4:

	= Examples =		= Examples =
			* [http://seclists.org/oss-sec/2013/q2/510 injection via block layer]

	= Mitigations =		= Mitigations =

KeesCook: Created page with "= Details = When an attacker supplied string is accidentally passed to format string parsing, the attacker can manipulate the resulting output. The write primitive available ..."

2015-11-04T22:17:07Z

Created page with "= Details = When an attacker supplied string is accidentally passed to format string parsing, the attacker can manipulate the resulting output. The write primitive available ..."

New page

= Details =

When an attacker supplied string is accidentally passed to format string parsing, the attacker can manipulate the resulting output. The write primitive available is through the use of the %n specifier, which writes to memory. All the other formats lead to information leaks.

= Examples =

= Mitigations =

* [https://git.kernel.org/linus/708d96fd060bd1e729fc93048cea8901f8bacb7c Eliminate the use of %n]
* detect non-const format strings at compile time (e.g. gcc's -Wformat-security)
* detect non-const format strings at run time (e.g. memory location checking done with glibc's -D_FORITY_SOURCE=2)

Bug Classes/Format string injection - Revision history

KeesCook: /* Examples */

KeesCook: Created page with "= Details = When an attacker supplied string is accidentally passed to format string parsing, the attacker can manipulate the resulting output. The write primitive available ..."