[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: Spam Update/Cyber Promo attacked



On Wed, 7 May 1997, Lucky Green wrote:

> Though shalt not use static size buffers for variable length data. [I don't
> need to tell this to Bill and many others on this list. The rest better
> chisel it in granite. :-]

Exception1: Unless you are fragmenting incoming data into chunks equal to 
or smaller than the size of your static buffer less 1 byte for the NUL 
character terminator. :)

Lemma1: Never assume anything about incoming data sizes, or formats.  
Example: The SBM client being able to do the equivalent of "cd .." on the 
root level of an NT share.

Lemma2: Always make sure when expecting data to time out if you do not 
receive what you expect.  Example: telnet to port 135 of unpatched NT 
server 4.0, type 10 characters, hit ENTER and disconnect.

=====================================Kaos=Keraunos=Kybernetos==============
.+.^.+.|  Ray Arachelian    | "So make a move and plead the fifth,   |./|\.
..\|/..|[email protected]|  'cause you can't pleade the first!"   |/\|/\
<--*-->| ------------------ |                                        |\/|\/
../|\..| "A toast to Odin,  | For with those which eternal lie, with |.\|/.
.+.v.+.|God of screwdrivers"| strange aeons, even death may die.     |.....
======================== http://www.sundernet.com =========================