Security Holes Involving Dangling Pointers
Like buffer-overflow bugs, dangling/wild pointer bugs frequently become security holes. For example, if the pointer is used to make a virtual function call, a different address (possibly pointing at exploit code) may be called due to the vtable pointer being overwritten. Alternatively, if the pointer is used for writing to memory, some other data structure may be corrupted. Even if the memory is only read once the pointer becomes dangling, it can lead to information leaks (if interesting data is put in the next structure allocated there) or to privilege escalation (if the now-invalid memory is used in security checks).
Read more about this topic: Dangling Pointer
Famous quotes containing the words security, holes, involving and/or dangling:
“I think the girl who is able to earn her own living and pay her own way should be as happy as anybody on earth. The sense of independence and security is very sweet.”
—Susan B. Anthony (1820–1906)
“And as my wit doth best devise,
Love’s dwelling is in ladies’ eyes,
From whence do glance love’s piercing darts,
That make such holes into our hearts;
And all the world herein accord,
Love is a great and mighty lord;”
—George Peele (1559–1596)
“What causes adolescents to rebel is not the assertion of authority but the arbitrary use of power, with little explanation of the rules and no involvement in decision-making. . . . Involving the adolescent in decisions doesn’t mean that you are giving up your authority. It means acknowledging that the teenager is growing up and has the right to participate in decisions that affect his or her life.”
—Laurence Steinberg (20th century)
“The tiger in the tiger-pit
Is not more irritable than I.
The whipping tail is not more still
Than when I smell the enemy
Writhing in the essential blood
Or dangling from the friendly tree.”
—T.S. (Thomas Stearns)