Ho hlasela lits'ebetso tsa ho bokella marang-rang ka ho qhekella lifaele tsa lihlooho

Hanno Böck, sengoli sa morero fuzzing-project.org, hlokometsoe bofokoling ba likhokahano tse kopaneng tse lumellang ts'ebetso ea khoutu ea kantle ka puo ea C. Ha ho hlakisoa tsela e itseng ho taelo ea "#include", phoso ea pokello e kenyelletsa likahare tsa faele tse neng li sa khone ho bokelloa.

Mohlala, ka ho kenya "#include" khoutu ho e 'ngoe ea litšebeletso tsa inthanete "Sephetho se khonne ho fumana hash ea motso oa mosebelisi ho tsoa faeleng ea /etc/shadow, e bonts'ang hore ts'ebeletso ea webo e sebetsa ka litokelo tsa metso mme e tsamaisa litaelo tsa pokello tlasa mosebelisi (ho ka etsahala hore setshelo se ka thoko. e ne e sebelisoa nakong ea ho bokella, empa ho qalisoa ka litokelo tsa metso ka har'a setshelo le hona ke bothata). Ts'ebeletso e nang le bothata eo ho neng ho khoneha ho hlahisa bothata hape ha e e-so phatlalatsoe. Boiteko ba ho bula lifaele ho FS /proc ea pseudo ha boa atleha hobane GCC e li nka e le lifaele tse se nang letho, empa ho bula lifaele ho tsoa ho /sys hoa sebetsa.

Source: opennet.ru

Eketsa ka tlhaloso