VC++ 7.0: The C Run-Time Library (5/5)
Buffer security check:
One of the most dangerous attacks against servers is exploiting unhandled buffer overflows. This way you can inject code. Overwriting the return address (and setting it to the malicious code) will run the attack.
How:
• OnStartup: Generate „magic“ cookie
• OnFuncCall: Write cookie before the return address
• OnFuncEnd: Check cookie value