36 36 votes Dynamic linking can cause security concerns becauseSecurity is dynamicThe path for searching dynamic libraries is not known till runtimeLinking is insecureCryptographic procedures are not available for dynamic linking Compiler Design gatecse-2002 compiler-design runtime-environment easy + – Kathleen 11.5k views answer comment Share Follow Print See all 2 Comments 2 2 Comments reply smsubham commented Mar 2, 2020 reply Follow flag https://gateoverflow.in/209810/why-is-dynamic-linking-less-secure#a210564 1 1 replyShare Abhishek-1011 commented Feb 14, 2025 reply Follow flag Suppose a program app.exe dynamically links to libcrypto.so for encryption. If an attacker places a malicious libcrypto.so in a directory that is searched before the legitimate one, the program may unknowingly load the fake library, allowing the attacker to execute arbitrary code.Sources: https://www.upguard.com/blog/dll-hijacking 3 3 replyShare Please log in or register to add a comment.
Best answer 66 66 votes Nonsense option, No idea why it is here. The path for searching dynamic libraries is not known till runtime -> This seems most correct answer. This is not true. Linking in itself not insecure. There is no relation between Cryptographic procedures & Dynamic linking. Akash Kanase answered Nov 22, 2015 • edited Jun 27, 2018 by kenzou Akash Kanase comment Share Follow See all 7 Comments 7 7 Comments reply Show 4 previous comments sunil sarode commented Jan 13, 2018 reply Follow flag process should access only area which is allocated to it .if it has permission then only it can access the other process resource.with hardware we can restrict the process to access the addresses between base and limit. In case of dynamic linking process may access the resource of other process so OS should take care of it . In case malware try to access the other process resource which it should not ,OS must take care of such unauthorized access. also check this:https://stackoverflow.com/questions/4136582/dynamic-linking-is-less-secure 21 21 replyShare Ayush Upadhyaya commented Sep 30, 2018 reply Follow flag In dynamic linkin, all external references are that of a stub. A stub is a piece of code which knows how to locate and load the appropriate memory resident library routine which is needed. So, if this stub contains the address of a malicious code, then security is a concern. 22 22 replyShare PSDesai09 commented Jan 12, 2021 reply Follow flag great explanation 0 0 replyShare Please log in or register to add a comment.
22 22 votes Dynamic linking is type of linking in which libraries required by the program are linked during run time. And evaluating all options B seems correct one. Bikram answered Dec 28, 2016 Bikram comment Share Follow See all 4 Comments 4 4 Comments reply Brij Mohan Gupta commented Aug 18, 2017 reply Follow flag @Bikram Sir Dynamic linking is not making any sense with cryptography for security, option B seems to be correct. 1 1 replyShare Bikram commented Aug 18, 2017 reply Follow flag yes there is no relation between cryptography and dynamic linking. 2 2 replyShare Brij Mohan Gupta commented Aug 22, 2017 reply Follow flag Thanks, Sir. 0 0 replyShare bharti commented Sep 13, 2017 reply Follow flag @Bikram sir option B is true. but how can it cause security concerns ? sir give me some real time example please 1 1 replyShare Please log in or register to add a comment.
2 2 votes b. path is not not known so it's not easy to intruder to place malicious program. skrahul answered Jan 20, 2015 skrahul comment Share Follow See 1 comment 1 1 comment reply suvasish pal commented Sep 18, 2017 reply Follow flag Is this can be a logic? 0 0 replyShare Please log in or register to add a comment.
1 1 vote People finding explanation on option B may go to the following link: https://gateoverflow.in/209810/why-is-dynamic-linking-less-secure Specially see @smsubham answer. May read my short answer as well. Akash Kumar Roy answered Mar 2, 2020 Akash Kumar Roy comment Share Follow 0 reply Please log in or register to add a comment.
