Security Beyond C

By now, most C/C++ programmers are familiar with the dangers of allowing untrusted user input into a format string. But just because languages like Ruby, Perl, Python and Java are less susceptible to buffer overflow doesn't mean that format strings in these languages are safe. You should know the risks in order to minimize the danger. Hal Burch and Robert Seacord lay it all out in "Programming Language Format String Vulnerabilities."

Posted by Kevin Carlson at 01:06 PM  Permalink