MENU
Kyle is performing the final testing of an application he developed for the accounting department. His last round of testing is to ensure that the program is as secure as possible. Kyle runs the following command. What is he testing at this point?
include
#include
int main(int argc, char *argv[])
{
char buffer[10];
if (argc < 2)
{
fprintf(stderr, "USAGE: %s string\n", argv[0]);
return 1;
}
strcpy(buffer, argv[1]);
return 0;
}
Suggested Answer: A
Get Premium ECSAv10 Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
13 comments · newest first
TW
Twila
12 months ago
Not sure, could it be something else?
CA
Carlota
12 months ago
Yup, buffer overflow is definitely the issue here.
AN
Antonio
12 months ago
Wait, isn't that a bit too obvious?
KY
Kyoko
1 year ago
Totally agree, that's a classic vulnerability!
NO
Noah
1 year ago
He's testing for buffer overflow.
ED
Edward
1 year ago
I’m confused because I thought SQL injection was more about database queries, but this seems to be about memory issues.
GA
Gary
1 year ago
This looks similar to a practice question we did on buffer overflows in class. I feel like that's the main issue with strcpy.
VA
Vanda
1 year ago
I'm not entirely sure, but I remember something about format string bugs being related to printf functions, so that doesn't seem right here.
TE
Terrilyn
1 year ago
I think Kyle is testing for a buffer overflow since he's using strcpy without checking the length of argv[1].
FL
Florinda
1 year ago
Hmm, this is a tricky one. I'm not entirely sure about the specifics of using URPF in an IPsec VPN environment. I'll need to review my notes and try to piece together the right strategy.
DE
Desiree
1 year ago
Hmm, this seems like a tricky one. I'll need to think it through carefully.
JO
Joesph
1 year ago
Okay, let me think this through step-by-step. The question is asking about the result of an array addition, and the image shows some arrays. I'll need to add up the elements in the arrays to determine the correct answer.
ET
Ethan
1 year ago
Wait, what's "Ut scanning"? I'm not familiar with that term in the context of corrosion. I'll have to guess on this one and hope for the best.