Skip to content

How a buffer overflow takes control

A function copies attacker-supplied input into a fixed-size local array without checking the length.

How does this let an attacker run their own code?