On Wed, 31 Oct 2001 00:14:00 +0100 ALoR <Alorat_private> wrote: > > > At 19.47 30-10-2001, aweat_private wrote: > >Hi, > >I've traced this and problem is in API function WriteFile, further > >in some NT internal call (int 2E), it only occurs when console is > > I've traced it with the VC++ debugger and it crasched on > ExitProcess() > after the printf. > but the really amazing thing is that debugging it another time let > me no > crash. > again and it crashed in the CRT I/O routines. > Hi list, I just read a paper on format string vulnerabilities, and this problem makes me thing that maybe it is related to such a vulnerability. In this paper, there is an interresting section on the __atexit() function (IIRC), being executed when the exit() function is called to end a program. It is written for Unix systems, but maybe it can help to understand. The paper is written by Team-Teso, and is available here: http://www.team-teso.net/articles/formatstring/ ========================================================== FreeBSD Network - http://www.gomor.org/ Security Engineer Junior ========================================================== =-----=> root is the only God I believe in <=-----=
This archive was generated by hypermail 2b30 : Thu Nov 01 2001 - 08:38:14 PST