Kai hari kan tsarin harhada kan layi ta hanyar sarrafa fayilolin kai

Hanno Böck, marubucin aikin fuzzing-project.org, lura akan rashin lahani na musaya masu haɗakarwa waɗanda ke ba da damar sarrafa lambar waje a cikin yaren C. Lokacin tantance hanyar sabani a cikin umarnin "#clude", kuskuren tattarawa ya haɗa da abubuwan da ke cikin fayil ɗin da ba za a iya haɗa su ba.

Misali, ta hanyar musanya “#include ” a cikin lambar a ɗaya daga cikin ayyukan kan layi, abin da aka fitar ya sami damar samun hash na kalmar sirri ta tushen mai amfani daga fayil ɗin /etc/shadow, wanda kuma ke nuna hakan. Sabis na gidan yanar gizon yana gudana tare da haƙƙin tushen kuma yana gudanar da umarnin tattarawa azaman tushen (yana yiwuwa an yi amfani da akwati da aka keɓe yayin haɗawa, amma gudana azaman tushen a cikin akwati shima matsala ce). Har yanzu ba a tallata sabis ɗin mai matsala wanda zai yiwu a sake haifar da matsalar. Ƙoƙarin buɗe fayiloli a cikin pseudo FS/proc bai yi nasara ba saboda GCC yana ɗaukar su azaman fayilolin wofi, amma buɗe fayiloli daga / sys yana aiki.

source: budenet.ru

Add a comment