Re: Good integer overflow papers?
Yves Younan <[email protected]>
| Newsgroups | gmane.comp.security.programming |
|---|---|
| Message-ID | <1067971704.1865.17.camel@localhost> |
On Tue, 2003-11-04 at 14:40, John Wilander wrote:
> Hello SecProg debaters!
>
> Apart from these papers, any suggestions?
There's my master thesis (which I've mentioned on vuln-dev too, in reply
to a similar question): http://fort-knox.org/thesis.php
It describes a range of vulnerabilities, how they can be exploited and
some solutions that exist for it. Some of the subjects I write about are
integer overflows and integer signedness errors.
It also contains a case study on the GOBBLES apache-scalp exploit which
exploits an integer signedness error.
- YY
They that give up essential liberty to obtain a little temporary safety
deserve neither liberty nor safety.
- Benjamin Franklin
signature.asc
(application/pgp-signature, 189 B)
-----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.3 (GNU/Linux) iD8DBQA/p/R4G0XC99YF7HURAsvDAJ9eDdbGmR14YqAzgaUqGEC5sJUf7gCeKaE1 fMf6jrB796A7OK7GGET74c4= =3rFk -----END PGP SIGNATURE-----