Security

Question

Suppose a source code has buffer overflow  vulnerabilities. Which of the following can cause buffer overflow  vulnerabilities

a. Scanf("%s",...)

b.  Strcpy(destination, source)

c. Send command use for network  connection

Options

1. Only a

2. b and c

3. a and b

4.all of the above

Answer 1

The correct answer is: A and B

Both scanf("%s", ...) and strcpy(destination, source) can cause buffer overflow vulnerabilities if not used carefully and securely. scanf can cause buffer overflow when used with %s without specifying a maximum width, and strcpy can cause buffer overflow when copying a source string that is longer than the destination buffer.

The "send command used for network connection" mentioned in option C can also potentially lead to buffer overflow vulnerabilities in network-related code if incoming data is not handled properly, but it is not always guaranteed to cause buffer overflows in every network communication scenario. Therefore, while C could potentially be a source of buffer overflow vulnerabilities, it's not as directly related as A and B.