Talk:Buffer overflow

History vs history of malice
I added some early history of buffer overflows back, and reset the title from "History of malicious exploitation" to "History." I think it's important for an encyclopedia article to give a full history, not jump in mid-stream with how people are taking advantage of the class of issue. — Preceding unsigned comment added by Emergentchaos (talk • contribs) 00:45, 30 June 2011 (UTC)

Merge from Stack buffer overflow
Stack buffer overflow is a good article, but I think a lot of the content (esp diagrams) could be placed on this page instead, there is little which is specific to stack buffer overflows. -- Tompsci 14:01, 17 August 2007 (UTC)
 * I disagree that this information is specific to stack buffer overflows, the details of exploiting a buffer overflow are very different for a heap overflow vs a stack overflow for example...I for one would be opposed to such a merge... --Michael Lynn 17:55, 17 August 2007 (UTC)
 * Agreed, but the buffer overflow article is about buffer overflows in general and all the concepts you discuss can be generalised to apply to the heap aswell, or apply already. I think some of the content which covers ground already covered by "Buffer Overflow", covers it better, especially where the diagrams are used, which are really clear and aesthetically pleasing. That's why I am suggesting a merge. Especially since the stack-based page is not wiki linked much. -- Tompsci 00:49, 18 August 2007 (UTC)
 * I think it might be better to add or edit the content of buffer overflows article than to try to generalize buffer overflows with stack overflow content. the reason i say this is because the details of exploiting a stack buffer overflow are *completely* different from exploiting heap overflows. so much of the literature on this subject seperates the topics thats why I don't see it too bad to seperate them here. The way i think would be best would be to discuss the generalities of what people do with buffer overflows without respect to which kind they are and without going into the details of how they are exploited, and leaving the details of exploitation to the heap overflow and stack buffer overflow articles..that would leave the buffer overflow article to discuss the details of the impact of buffer overflow in general. You'll notice that I left most of the overall security ramifications out of the stack buffer overflows article because that seemed to fit in this article much better. I'm currently working on more diagrams for heap overflows, off by one exploits, and format string bugs, that would make them all look like they all go together better i think. --Michael Lynn 08:22, 18 August 2007 (UTC)
 * Ok, that makes more sense to me now. But I think some of the material belongs in buffer overflow not stack buffer overflow and the stack buffer overflow material can be removed as I think your material is superior to what already exists. I'll make the relevant changes and if you disagree then we can maybe revert the changes. -- Tompsci 10:52, 18 August 2007 (UTC)
 * sure thing, but do keep in mind that a little bit of duplication is not always a bad thing. --Michael Lynn 11:13, 18 August 2007 (UTC)
 * Agreed —Preceding unsigned comment added by 70.100.173.51 (talk) 22:40, 2 October 2007 (UTC)
 * Why? There are a lot of articles, where subthemes are represented as separated articles. Buffer overflow is the general type consiting of a set of subtypes. With such a success we can merge, for instance, Buffer overflow and Heap overflow articles.--91.76.20.6 (talk) 07:18, 23 December 2007 (UTC)

Does "deep packet inspection" section matter?
Deep packet inspection doesn't find modern buffer overflows. The technique has been of clearly limited value since Ptacek and Newsham's paper. Should that section go away?


 * It should go. It has nothing (directly) to do with this subject. It could be added as a sidenote, linking to Deep_packet_inspection in reference to security implications/issues in software development, but that's a way broader issue.
 * 83.252.234.134 (talk) 06:43, 2 December 2016 (UTC)

1 question about the Code Red worm mentioned in this article...
In this article it's been written that the code red worm exploited a buffer overflow on IIS, but didn't it just exploit the web trasversal unicode bug? I mean, if so, no buffer overflows where used in that exploit, just unicode double encoding, that is pretty more simple... GET /scripts/%252e%252e/%252e%252e/%252e%252e/winnt/cmd.exe?/c+dir+c: HTTP/1.0\r\nHost: IIS.insecure.domain.com\r\n\r\n —Preceding unsigned comment added by 80.180.208.118 (talk) 19:05, 15 October 2007 (UTC)

it would've beem extremely informative
giving the windows buffer's file names and some technical review. regards, 23:19, 8 January 2009 (UTC)

Overwriting VMTs of heap allocated objects
The Heap Exploits section could mention this method. It's possible under some object layouts.

Rep movsd (talk) 14:26, 4 March 2009 (UTC)

Overreads?
The article appears to deal solely with buffer overwrites, yet overreads can be nasty bugs too. 119.225.239.230 (talk) 20:47, 11 April 2014 (UTC)


 * Heartbleed bug isn't a buffer overflow as no adjacent memory is overwritten during its exploitation. &mdash; Dsimic (talk | contribs) 03:50, 14 April 2014 (UTC)
 * What Dsimic is trying to say is that the term "buffer overflow" is generally only used to describe a specific type of out-of-bounds write. "Buffer overreads" would be a form of out-of-bounds reads, which one would not call a buffer overflow. However, I could not find an existing article about out-of-bounds reads of any form on Wikipedia. If you feel there is a need for one, you may want to start it. — SkyLined (talk) 07:02, 14 April 2014 (UTC)
 * Exactly. Regarding the coverage within Wikipedia articles,  section provides an overview, though it could be improved further. &mdash; Dsimic (talk | contribs) 18:32, 16 April 2014 (UTC)
 * I have just created buffer overread redirected to buffer over-read, though which spelling is better I wouldn’t know. It is very much a stub, but includes, commented out, almost all of buffer overflow, so anyone is welcome to transform that and to discard what is irrelevant. I don’t intend to do anything more, apart from adding some links from other articles, in the next few hours, maybe not even the next few days, so anyone really is welcome. PJTraill (talk) 10:16, 24 April 2014 (UTC)

External links modified
Hello fellow Wikipedians,

I have just added archive links to 2 one external links on Buffer overflow. Please take a moment to review my edit. If necessary, add after the link to keep me from modifying it. Alternatively, you can add to keep me off the page altogether. I made the following changes:
 * Added archive https://web.archive.org/20070512195939/http://www.metasploit.com:80/users/opcode/msfopcode.cgi to http://metasploit.com/users/opcode/msfopcode.cgi
 * Added archive https://web.archive.org/20070212032750/http://wiki.x.org:80/wiki/ProPolice to http://wiki.x.org/wiki/ProPolice

When you have finished reviewing my changes, please set the checked parameter below to true to let others know.

Cheers. —cyberbot II  Talk to my owner :Online 16:10, 25 August 2015 (UTC)


 * Looking good. &mdash; Dsimic (talk &#124; contribs) 05:22, 26 August 2015 (UTC)

External links modified
Hello fellow Wikipedians,

I have just added archive links to 3 one external links on Buffer overflow. Please take a moment to review my edit. If necessary, add after the link to keep me from modifying it. Alternatively, you can add to keep me off the page altogether. I made the following changes:
 * Added archive http://web.archive.org/web/20070818115455/http://www.neworder.box.sk:80/newsread.php?newsid=12476 to http://www.neworder.box.sk/newsread.php?newsid=12476
 * Added archive http://web.archive.org/web/20090817230359/http://doc.bughunter.net:80/buffer-overflow/ to http://doc.bughunter.net/buffer-overflow/
 * Added archive http://web.archive.org/web/20151231205722/http://www.syngress.com/book_catalog/327_SSPC/sample.pdf to http://www.syngress.com/book_catalog/327_SSPC/sample.pdf

When you have finished reviewing my changes, please set the checked parameter below to true to let others know.

Cheers.—cyberbot II  Talk to my owner :Online 07:49, 27 February 2016 (UTC)

Programming languages (blame)
I think the "Programming languages commonly associated with buffer overflows" is both putting C and C++ in undeserved bad light (the problem is from developers using the languages, not the languages themselves), and it's given a way too (undeserved) prominent placement in the lead.

I'd like to see this re-worded, and placed towards the end of the article (if it's even to stay) - to me it currently reads like an ad for "managed" languages. 83.252.234.134 (talk) 07:09, 2 December 2016 (UTC)

Protection number 9
Is not the using of an OS which uses the segmentation of the IA-32 protected mode an effective protection against buffer overflow?! If so this can be explained as a 9th solution of protection. --93.220.240.5 (talk) 21:32, 25 September 2017 (UTC)

External links modified
Hello fellow Wikipedians,

I have just modified 5 external links on Buffer overflow. Please take a moment to review my edit. If you have any questions, or need the bot to ignore the links, or the page altogether, please visit this simple FaQ for additional information. I made the following changes:
 * Added archive https://web.archive.org/web/20060105041036/http://www.net-security.org/dl/articles/unicodebo.pdf to http://www.net-security.org/dl/articles/unicodebo.pdf
 * Added archive https://archive.is/20120529183334/http://kerneltrap.org/node/644 to http://kerneltrap.org/node/644
 * Added archive https://web.archive.org/web/20120219111512/http://linux.softpedia.com/get/System/Operating-Systems/Kernels/Openwall-Linux-kernel-patch-16454.shtml to http://linux.softpedia.com/get/System/Operating-Systems/Kernels/Openwall-Linux-kernel-patch-16454.shtml
 * Added archive https://web.archive.org/web/20070928011639/http://c0re.23.nu/~chris/presentations/overflow2005.pdf to http://c0re.23.nu/~chris/presentations/overflow2005.pdf
 * Added archive https://web.archive.org/web/20130126024851/http://www.awarenetwork.org/etc/alpha/?x=5 to http://www.awarenetwork.org/etc/alpha/?x=5

When you have finished reviewing my changes, you may follow the instructions on the template below to fix any issues with the URLs.

Cheers.— InternetArchiveBot  (Report bug) 20:14, 1 December 2017 (UTC)

Image in lead
Pinging since they reverted: I had recently made an attempt to create an image representation of buffer overflows, and finished int yesterday. Unfortunately, I was incorrect about my understanding of overflows and it was thankfully taken back out. Coincidentally, I have found a similar vector image, that seems to be accurate,File:Buffer_overflow_basicexample.svg. SkyLined, do you think this image is suitable and correct? If so, I could insert it. If not, perhaps a correct one could be made. WhoAteMyButter ( 📨talk │ 📝contribs ) 02:33, 13 November 2021 (UTC)
 * That looks accurate, feel free to add it. Thank you for taking the time to create it! 163.158.13.177 (talk) 10:07, 13 November 2021 (UTC)