什么是缓冲区溢位？
什么是缓冲区溢出？
A fix for a buffer overflow problem in DHCPD (8).
修复了dhcpd(8)中的缓冲区溢出问题。
This column gives an overview of the buffer overflow problem.
本专栏概述了缓冲区溢位问题。
But the buffer overflow problem is far from ancient history.
但是，缓冲区溢位问题并非已成古老的历史。
This is why our next four columns will deal with buffer overflow.
这就是下面四个专栏将讨论缓冲区溢位的原因。
Listing 1. example1.c (vulnerable to a heap-based buffer overflow).
清单1 . example1 . c(容易出现基于堆的缓冲区溢出)。
Listing 4. example2.c (vulnerable to a heap-based buffer overflow).
清单4 . example2 . c(容易出现基于堆的缓冲区溢出)。
Here, we first introduce the concept and theory of buffer overflow.
在此，首先介绍缓冲区溢出的概念和原理。
This paper presents an efficient approach to buffer overflow attacks.
本文针对缓冲区溢出攻击提出了一种有效的抵御方法。
This added a new method for the buffer overflow detection of software.
这为软件的缓冲区溢出检测增添了一种新的方法。
So far, all our examples of buffer overflow exploits have been for UNIX systems.
目前，我们举的所有利用缓冲区溢位的范例都是针对UNIX系统的。
As a result, buffer overflow problems are often invisible during standard testing.
因此，缓冲区溢位问题常常在标准测试期间是发现不了的。
All of these attacks — and many others — exploited a vulnerability called a buffer overflow.
所有这些攻击——以及其他许多攻击，都利用了一个称做为缓冲区溢出的程序缺陷。
We proposed a method to forbid attackers to exploit the buffer overflow vulnerabilities.
本文提出了一种阻止攻击者利用缓冲区溢出漏洞的方法。
A buffer overflow in a program such as find is likely to be a risk to a great number of systems.
诸如find这样的程序中的缓冲区溢出可能会给大量的系统带来风险。
There are a number of tools that can help detect buffer overflow vulnerabilities before they're released.
有许多工具可以在缓冲区溢出缺陷导致问题之前帮助检测它们。
Doing so can lead some poorly written implementations into buffer overflow errors (and all that implies).
这样做会使编写不够严谨的程序出现缓冲区溢出错误（以及所有类似隐患）。
This tracking or recomputation is easy to get wrong, and any mistake can open the door to a buffer overflow attack.
这种跟踪或重新计算很容易出错，而任何错误都可能给缓冲区攻击打开方便之门。
In the instance of a buffer overflow attack, an internal value in a program is overflowed to alter how the program runs.
在缓冲区溢出攻击的实例中，程序的内部值溢出，从而改变程序的运行方式。
The immediate cause of the vulnerability was that one of Sendmail's security checks was flawed, permitting a buffer overflow.
造成这一漏洞的直接原因是，Sendmail的一个安全检测是有缺陷的，可以发生缓冲区溢出。
At last discuss how to defense buffer overflow by the rule of buffer overflow and the structure character of injected code.
最后讨论如何根据溢出规律和植入代码的结构特征，采取有效措施来防御缓冲区溢出攻击。
For instance, a program designed to exploit a buffer overflow is very likely to use some inline assembly for the target platform.
举例来说，设计利用缓存溢出的程序很可能会对目标平台使用内联汇编。
A buffer overflow, or buffer overrun, occurs when a process attempts to store data beyond the boundaries of a fixed-length buffer.
当进程尝试将数据储存到固定长度的缓冲区的范围之外时，就会出现缓冲区溢出。
The return value is always the size of the combined string if no buffer overflow occurred; this makes it really easy to detect an overflow.
如果没有发生缓冲区溢出，返回值始终是组合字符串的长度；这使得检测缓冲区溢出真正变得容易了。
An attacker may be able to exploit a buffer overflow by changing the value of other data in the function; none of these approaches counter that.
攻击者也许能够通过改变函数中其他数据的值来利用缓冲区溢出；没有哪种方法能够防止这点。
For example, a buffer overflow in a network server program that can be tickled by outside users may provide an attacker with a login on the machine.
例如，外部使用者可以利用的网路伺服器程序中的缓冲区溢位，可能使攻击者登入到机器。
The danger is that if you forget to take the available buffer space into account, you can still permit a buffer overflow attack even when usingstrncpy(3).
这样的危险之处在于，如果忘了考虑可用的缓冲区空间，那么即使在使用strncpy(3)时也可能会留下缓冲区攻击隐患。
This makes it much harder to manipulate the return address, but it doesn't defend against buffer overflow attacks that change the data of calling functions.
这样使得操纵返回地址困难多了，但它不会阻止改变调用函数的数据的缓冲区溢出攻击。
In a buffer overflow attack, the hacker takes advantage of specific type of computer program bug that involves the allocation of storage during program execution.
在缓冲溢出攻击中，黑客利用了程序执行期间存储分配中的特定计算机程序漏洞。
应用推荐