Writing Secure Code: Software Flaws

 

-Memory Organization

Program Execution

Stack

Function Call

-Overflows

Stack Overrun

Heap Overrun

Format Strings

Integer Upper / Underflow

SQL Injection

Cross-Site Scripting XSS

-Solutions

Validate input

Improper Error Handling

-Summary

Buffer Overflow

Format String

Integer Overflow

SQL Injection

Cross-Site Scripting XSS

-Conclusion