1 reply to this topic

[Foxy999]

I am new somewhat new to C and finding vulnerabilities in programs. And I think I found vulnerable code if it is possible to exploit the recv() function in C.

Like is it possible to exploit it even if the parameter for size is defined? Like:

recv(sock, buffer, sizeof(buffer) - 1, 0)


Foxyy

[Jeremywilms]

If the argument which describes the size of the buffer is equal to or less than the size of the buffer, then the operation is entirely safe as far as I can see.

Sometimes the recv api can be poorly handled and cause a buffer-overflow but don't count on it.