lists.openwall.net   lists  /  announce  owl-users  owl-dev  john-users  john-dev  passwdqc-users  yescrypt  popa3d-users  /  oss-security  kernel-hardening  musl  sabotage  tlsify  passwords  /  crypt-dev  xvendor  /  Bugtraq  Full-Disclosure  linux-kernel  linux-netdev  linux-ext4  linux-hardening  linux-cve-announce  PHC 
Open Source and information security mailing list archives
 
Hash Suite for Android: free password hash cracker in your pocket
[<prev] [next>] [<thread-prev] [day] [month] [year] [list]
Date: Mon, 12 Jan 2009 19:46:47 -0800
From: Andrew Farmer <andfarm@...il.com>
To: Will McAfee <sec-community@...goodhacker.com>
Cc: Full Disclosure <full-disclosure@...ts.grok.org.uk>
Subject: Re: Help with something?

On 12 Jan 09, at 09:53, Will McAfee wrote:
> I got started a long time ago writing example code for new security-
> interested people.  I got just one example done, my full time job and
> school started, and gave up debugging.  Just out of curiosity, going
> to throw it out there.  It's the only example up at http://labs.thegoodhacker.com/
>  let's see where I messed up.  It segfaults, if I remember correctly.

At a glance, you're doing linked list management wrong. Stop trying to  
code your own. This is C++; the STL exists for a reason.

Same goes for char arrays (which you leak all over the place). The STL  
has strings too.

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

Powered by blists - more mailing lists