This is the lab for my secure coding course.
I have to do formatting labs for this programs please can anyone help me out thru this thanks!
so what we have to do for this " We need to protect exploit.c from a formatted output vulnerability.
1) exploit_func_ptr.c
2) exploit_working.c
3) exploit.c
#include #include #include
static void (*func_ptr) (const char *str) void function (const char* str) printf("%s ", str); int main (int argc, char **argv) char buffer[512; char format[1024]; unsigned char foo[4] -t0); if (argc print f ("&func-ptr-> %p ", %p ", func-ptr ); &func-ptr); strcpy (format, argv[1]); snprintf (buffer, sizeof (buffer), format) buffersizeof (buffer) -1] - x00 print f print f ("func-ptr-> ("&func-ptr-> %p ", %p ", func-ptr ); &func-ptr); print f ("%02x%02x%02x%02x at address %p ", foo[3], foo[2], foo [1], foo[0], &foo ) ; printf( "goodbye"); (voi ("done") id) (*func ptr) return 0; #include #include #include int main (int argc, char **argv) char buffer[512; char format[ 1024]; unsigned char foo[ 4] -0)i if (argc2) return -1; strcpy(format, argv[1]); snprintf (buffer, sizeof (buffer), format); buffer[sizeof (buffer) - 1] x00 fprintf(stdout, fprintf ( stdout, " you entered "%02x%02x%02x%02x %s ", buffer ); address : at %pin", foo [3], foo [ 2] , foo[1], foo[0], &foo); printf("goodbye") printf(" "); exit (0) #include #include #include int main (int argc, char **argv) char buffer 512 unsigned char foo[4O if (argc static void (*func_ptr) (const char *str) void function (const char* str) printf("%s ", str); int main (int argc, char **argv) char buffer[512; char format[1024]; unsigned char foo[4] -t0); if (argc print f ("&func-ptr-> %p ", %p ", func-ptr ); &func-ptr); strcpy (format, argv[1]); snprintf (buffer, sizeof (buffer), format) buffersizeof (buffer) -1] - x00 print f print f ("func-ptr-> ("&func-ptr-> %p ", %p ", func-ptr ); &func-ptr); print f ("%02x%02x%02x%02x at address %p ", foo[3], foo[2], foo [1], foo[0], &foo ) ; printf( "goodbye"); (voi ("done") id) (*func ptr) return 0; #include #include #include int main (int argc, char **argv) char buffer[512; char format[ 1024]; unsigned char foo[ 4] -0)i if (argc2) return -1; strcpy(format, argv[1]); snprintf (buffer, sizeof (buffer), format); buffer[sizeof (buffer) - 1] x00 fprintf(stdout, fprintf ( stdout, " you entered "%02x%02x%02x%02x %s ", buffer ); address : at %pin", foo [3], foo [ 2] , foo[1], foo[0], &foo); printf("goodbye") printf(" "); exit (0) #include #include #include int main (int argc, char **argv) char buffer 512 unsigned char foo[4O if (argc
