Multiple choice technology security 

int main (int argc, char *argv[]){
    char chararray[3];
    int intarray[3];
    int i;
    strncpy(chararray, argv[1], sizeof(chararray) - 1);
    for (i=0;i<=3; i++){ /*1*/   chararray[i]= getchar();
        intarray[i]=i*i;/*2*/
    }
}

Is there a vulnerability in this code? If yes, which line(s) (Line numbers are marked using comments /* */)?

  1. 1

  2. 2

  3. 1 & 2

  4. No vulnerability
Reveal answer Fill a bubble to check yourself
A Correct answer
Explanation

In line 1, the loop condition is i <= 3. Since chararray is of size 3 and intarray is of size 3, writing to index 3 (when i == 3) results in an out-of-bounds write (buffer overflow) for both arrays. Hence, line 1 is the source of the loop boundary vulnerability.

AI explanation

To answer this question, let's analyze the code and identify any potential vulnerabilities.

The vulnerability in this code lies in line 1, marked by the comment /1/.

In line 1, the code attempts to read characters from the standard input using getchar() and store them in the chararray array. However, the chararray array has a size of 3, which means it can only hold three characters (including the null terminator). If the user enters more than three characters, this will result in a buffer overflow, causing undefined behavior and potentially leading to a security vulnerability.

To fix this vulnerability, the chararray array should have a size that is large enough to accommodate the maximum number of characters it needs to store, plus one for the null terminator. For example, if the maximum input size is 10 characters, the array declaration should be char chararray[11]; (10 characters + 1 null terminator).

Therefore, the correct answer is A) 1.

Keep practicing — related questions