Is buffer overflow/overrun possible in completely

2019-04-04 13:58发布

Can there be buffer overflow/overrun vulnerabilities in completely managed asp.net web portal.If yes how can this be tested.

3条回答
Ridiculous、
2楼-- · 2019-04-04 14:04

In the general case, you don't need to worry about buffer overruns. This is one of the major advantages of managed code, garbage collection being perhaps the other major advantage.

There are a few edge cases that you should be aware of - any time your managed code interacts with unmanaged code (Win32 API calls, COM interop, P/Invoke, etc) there is a potential for buffer overruns in the unmanaged code, based on parameters passed in from managed code.

Also code marked as "unsafe" can directly manipulate memory addresses in such a way as to cause buffer overflow. Most C# code is written without using the "unsafe" keyword, though.

查看更多
▲ chillily
3楼-- · 2019-04-04 14:13

Not unless you exploit the webserver or .NET/ASP.NET stack itself.

查看更多
forever°为你锁心
4楼-- · 2019-04-04 14:27

I had a tool (HP Dev Inspect) detect a possible "Possible Parameter Buffer Overflow" within my ASP.NET app and it was because we didn't have a MaxLength="20" in one of our TextBoxes...

查看更多
登录 后发表回答