On Tue, Nov 22, 2005 at 08:24:18PM +1100, O Plameras wrote:
[...]
> 
> Did you compile and run the program ?
> 
> It works.

Many programs with bugs that overwrite arbitrary memory appear to work just
fine, and then one day someone writes an exploit for it.

The fact that a program gives the expected output in a particular environment
with a particular compiler does not mean it is correct.

Understanding this issue and the possible consequences would be very useful for
when you make this mistake in another context, and have to figure out why your
program is crashing.

Your definition of "works" is short-sighted.

-Andrew.

-- 
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html

Reply via email to