Advertisement
Guest User

Untitled

a guest
Jan 27th, 2015
199
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 0.89 KB | None | 0 0
  1. #include <netdb.h>
  2. #include <stdio.h>
  3. #include <stdlib.h>
  4. #include <string.h>
  5. #include <errno.h>
  6. #define CANARY "in_the_coal_mine"
  7. struct {
  8. char buffer[1024];
  9. char canary[sizeof(CANARY)];
  10. }
  11.  
  12. temp = { "buffer", CANARY };
  13.  
  14. int main(void) {
  15. struct hostent resbuf;
  16. struct hostent *result;
  17. int herrno;
  18. int retval;
  19. /*** strlen (name) = size_needed - sizeof (*host_addr) - sizeof (*h_addr_ptrs) - 1; ***/
  20. size_t len = sizeof(temp.buffer) - 16*sizeof(unsigned char) - 2*sizeof(char *) - 1;
  21. char name[sizeof(temp.buffer)];
  22. memset(name, '0', len);
  23. name[len] = '\0';
  24. retval = gethostbyname_r(name, &resbuf, temp.buffer, sizeof(temp.buffer), &result, &herrno);
  25. if (strcmp(temp.canary, CANARY) != 0) {
  26. puts("vulnerable");
  27. exit(EXIT_SUCCESS);
  28. }
  29. if (retval == ERANGE) {
  30. puts("not vulnerable");
  31. exit(EXIT_SUCCESS); }
  32. puts("should not happen");
  33. exit(EXIT_FAILURE);
  34. }
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement