|
http://www.hackerschool.org/HS_Boards/zboard.php?AllArticle=true&no=119 [º¹»ç]
char str[100];
char a = 'A';
printf("a = %c\n",a);
strcpy(str, argv[1]);
printf("a = %c\n",a);
BOF ¿¬½ÀÇϰíÀÖ´Â ÇÞº´¾Æ¸® ÀÔ´Ï´Ù.
ÀÌ·¸°Ô str[100]À» ¸ÕÀú ¼±¾ðÇϰí a¸¦ ¼±¾ðÇÏ¸é ½ºÅÿ¡¼ aÀÇ À§Ä¡°¡ strÁÖ¼ÒºÁ ³·Àº °÷¿¡ À§Ä¡Çϴ°ɷΠ¾Ë°íÀÖ½À´Ï´Ù. FTZ ¼¹ö¿¡¼ ÇÁ·Î±×·¥ ¸¸µç ÈÄ gdb·Î µð½º¾î¼Àºí Çߴµ¥ º¯¼ö aÀÇ À§Ä¡°¡ [ebp - 121] À̰í strÀÇ ½ÃÀÛ ÁÖ¼Ò°¡ [ebp - 120]À¸·Î ³ª¿À´Âµ¥ ¿Ö ÀÌ·¸°Ô µÇ´Â°ÇÁö ¸ð¸£°Ú½À´Ï´Ù. ( ¸Þ¸ð¸® º¸È£±â¹ýÀº ´Ù ÇØÁ¦Çß½À´Ï´Ù. ) |
Hit : 2828 Date : 2018/11/13 01:39
|