Security

Question

User x has found that s source code has a buffer overflow vulnerability caused by strcpy instruction. He then used strncpy in place of strcpy to prevent buffer overflow vulnerabilities

Which of the following is  true

a.  Buffer overflow attack will not occur in this source code

b.  Buffer overflow vulnerabilities caused due  to strcpy is avoided to some extend since it do the bound check

c. This will not make any change in the source code

d. None of these

Answer 1

This will not make any change in the source code

Answer 2

b.  Buffer overflow vulnerabilities caused due  to strcpy is avoided to some extend since it do the bound check