Vulnerability Development mailing list archives

Re: reverse engineer c or java


From: zoachien () SECURAX ORG (Zoa_Chien)
Date: Mon, 22 May 2000 18:54:07 +0200



      A note on buffer over-runs in Java. A buffer overrun will stop
the program execution as soon as the OutOfBounds Exception occurs in
Strings, Arrays, etc. So there is no immediate threat of putting a
0x310xdb0xb80x170xcd0x80 on the stack, heh...

You might not be able to cause a buffer overflow in your java program, but
you still can cause your java compiler to overflow. (i noticed several
times already that Code Warrior Pro  contains some bugs).

I don't know if similar problems exist in the virtual machines, but that
wouldn't surprise me at all.

Zoa_Chien


Current thread: