[Guruji]:- User interface attack # 4
Overflow input buffers
· Exceeding array or structure size will cause a crash
· How: input long strings or other data beyond “normal” size
Such bugs are more serious in a server or other component that could be exploited to run arbitrary code
User interface attack # 5
Find inputs that interact and test combinations of their values
[Continued in the next day’s post]· Check to see if integration testing has been adequately performed
· How to carry out: identify candidate processes that are normally separate, but through some interaction may share a common data structure