full-disclosure - [xfocus-SD-060206]BCB compiler incorrect deal sizeof operator vulnerability

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Message-ID: <43E757BA.6000601@xfocus.org>
Date: Mon Feb  6 14:06:10 2006
From: security at xfocus.org (XFOCUS Security Team)
Subject: [xfocus-SD-060206]BCB compiler incorrect deal
	sizeof operator vulnerability

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Title:[xfocus-SD-060206]BCB compiler incorrect deal sizeof operator
vulnerability

Affected version : <= BCB6+ent_upd4
Vendor: http://borland.com/
Url: http://www.xfocus.net/releases/200602/a849.html


XFOCUS (http://www.xfocus.org) had already discovered
a vulnerability in BCB6(ent_upd4) compiler.
It maybe cause integer overflow if you misuse use sizeof operator.


/**
 * check_compiler_sizeof_vulnerability.c
 *
 * Check compiler whether correct deal with sizeof operator,
 * which can cause integer overflow if you careless use !!!
 *
 * note: some old compiler have this vulnerability!!!!
 *
 * by alert7@...cus.org
 *
 * XFOCUS Security Team
 * http://www.xfocus.org
 *
 * already tested:
 *
 * BCB6+ent_upd4....................................vuln !!!
 * gcc version 4.0.0 20050519 (Red Hat 4.0.0-8).....not vuln
 * gcc version 2.95.3-4(cygwin special).............not vuln
 * gcc version egcs-2.91.66.........................not vuln
 * cc: Sun WorkShop 6 2000/04/07 C 5.1 .............not vuln
 * VC6+sp5..........................................not vuln ,thank eyas
 * lcc version 3.8..................................not vuln ,thank
tombkeeper
 * evc4+sp4.........................................not vuln ,thank san
 *
 * REQUEST YOUR COMMENT:
 * VC6 not sp5......................................?
 * VC7..............................................?
 * evc not sp4......................................?
 * freebsd gcc version..............................?
 * openbsd gcc version..............................?
 * ...
 */
#include <stdio.h>

int main(int argc, char *argv[])
{
        int i =-1;

        printf("Check compiler whether correct deal with sizeof
operator\n");
        printf("  by alert7@...cus.org \n\n");

        if (i > sizeof ( int ) )
        {
                printf("This compiler is not vuln\n");
        }else
                printf("This compiler is vuln!!!\n");

         getchar();

        return 0;
}


- --EOF

- --

Kind Regards,

- ---
XFOCUS Security Team
http://www.xfocus.org

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.1 (GNU/Linux)

iD8DBQFD51e5whDwaF6cSWIRAmbkAJ4sN66WOJMKPY4RjSq5p7TvdSGGigCfe5SU
wolEFAITtYi8fWNND0uyO5c=
=ibnF
-----END PGP SIGNATURE-----