Click here to Skip to main content
15,899,313 members
Home / Discussions / C / C++ / MFC
   

C / C++ / MFC

 
GeneralRe: Closing application in InitDialog() Pin
Hans Ruck22-Apr-02 22:09
Hans Ruck22-Apr-02 22:09 
GeneralRe: Closing application in InitDialog() Pin
AlexMarbus23-Apr-02 0:35
AlexMarbus23-Apr-02 0:35 
GeneralRe: Closing application in InitDialog() Pin
Hans Ruck23-Apr-02 0:48
Hans Ruck23-Apr-02 0:48 
GeneralRe: Closing application in InitDialog() Pin
Tim Smith23-Apr-02 2:19
Tim Smith23-Apr-02 2:19 
GeneralBackdoors! Pin
Rickard Andersson2022-Apr-02 21:29
Rickard Andersson2022-Apr-02 21:29 
GeneralRe: Backdoors! Pin
l a u r e n22-Apr-02 22:34
l a u r e n22-Apr-02 22:34 
GeneralRe: Backdoors! Pin
Rickard Andersson2022-Apr-02 23:07
Rickard Andersson2022-Apr-02 23:07 
GeneralRe: Backdoors! Pin
Giles23-Apr-02 0:12
Giles23-Apr-02 0:12 
Buffer under/over runs, though people accidently , or even maliciously passing strings/streams of data, that can cause your custom protocol to fail. This is largely seen in C++ imlpementation though the use of pointers or unchecked arrays, that can go below or above the array boundaries. Not only could data become corupted like this, clever malicous programmers can exploit these weakneses, and inject there own binary code that executes correctly and allows then to execute thier own code on the server, quite often as a worm or virus - e.g. Nimida, or what ever it is called.

Where as with a langage like VB this kind of thing is less likley to happen. With VB for example there are still weaknesses that can be exploted with poorly implemented code. But then you don't often write severs in VB that handle multimepl connections.

The clasic example is for a web server. A user passes a URL of a page to be served e.g. http:\\localhost\index.htm

A bad implementation would just chop off the http and host name and convert it to the currect webroot folder, so that a malformed address such as http:\\localhost\..\..\a_file.txt
would be transalated to extract a file two folders above the webroot folder though the .. in the path!!

Think about ways in which someone implementing a custom client for your server could accidently malform the protocol or data passed, and how the server would handle it. e.g. The first 4 bytes of your custom protocol indicate how many bytes are in the buffer, when in fact more have been passed. Validate everything.

Hope this helps,Big Grin | :-D


Giles
GeneralRe: Backdoors! Pin
Rickard Andersson2023-Apr-02 0:55
Rickard Andersson2023-Apr-02 0:55 
GeneralRe: Backdoors! Pin
Mike Nordell23-Apr-02 10:12
Mike Nordell23-Apr-02 10:12 
QuestionHow to check if a directory Exists Pin
Sameer Maggon22-Apr-02 21:10
Sameer Maggon22-Apr-02 21:10 
AnswerRe: How to check if a directory Exists Pin
l a u r e n22-Apr-02 21:16
l a u r e n22-Apr-02 21:16 
GeneralRe: How to check if a directory Exists Pin
Sameer Maggon22-Apr-02 21:55
Sameer Maggon22-Apr-02 21:55 
AnswerRe: How to check if a directory Exists Pin
Tom Archer23-Apr-02 3:50
Tom Archer23-Apr-02 3:50 
GeneralRe: How to check if a directory Exists Pin
Mike Nordell23-Apr-02 10:15
Mike Nordell23-Apr-02 10:15 
GeneralRe: How to check if a directory Exists Pin
Tom Archer23-Apr-02 10:23
Tom Archer23-Apr-02 10:23 
AnswerRe: How to check if a directory Exists Pin
Ravi Bhavnani23-Apr-02 10:33
professionalRavi Bhavnani23-Apr-02 10:33 
GeneralRe: How to check if a directory Exists Pin
Jamie Hale16-May-02 10:05
Jamie Hale16-May-02 10:05 
GeneralRe: How to check if a directory Exists Pin
Ravi Bhavnani16-May-02 10:56
professionalRavi Bhavnani16-May-02 10:56 
GeneralPageSetup dialog and Print dialog Pin
nilaysoft22-Apr-02 20:04
nilaysoft22-Apr-02 20:04 
GeneralRe: PageSetup dialog and Print dialog Pin
Roger Wright22-Apr-02 20:05
professionalRoger Wright22-Apr-02 20:05 
QuestionHow can I get the net adapter address? Pin
wangyiming22-Apr-02 19:14
wangyiming22-Apr-02 19:14 
AnswerRe: How can I get the net adapter address? Pin
Albert Pascual23-Apr-02 6:48
sitebuilderAlbert Pascual23-Apr-02 6:48 
GeneralRe: How can I get the net adapter address? Pin
wangyiming26-Apr-02 21:44
wangyiming26-Apr-02 21:44 
QuestionTabs on all my MidClients? Pin
rbc22-Apr-02 16:57
rbc22-Apr-02 16:57 

General General    News News    Suggestion Suggestion    Question Question    Bug Bug    Answer Answer    Joke Joke    Praise Praise    Rant Rant    Admin Admin   

Use Ctrl+Left/Right to switch messages, Ctrl+Up/Down to switch threads, Ctrl+Shift+Left/Right to switch pages.