On TV.com: Top 15 TV THEME Songs
BNET Business Network:
BNET
TechRepublic
ZDNet
TalkBack 5 of 123:
Next »
« Previous
There's a few
Conceptual:

1) Why is this Assembly? Most of Windows is C
2) Why is it calling CRT when it should be calling API

Code:
1) No check on allocation failure
2) Copy 10 DWORD into a buffer of 5 bytes
3) Assumes state of DF

Size Optimization:
1) Replace mov eax,0x00 with xor eax,eax

This is a crash only bug, it is not exploitable for code execution.

At least three bugs in 12 lines of assembly. Are you sure you don't work for MS?
Posted by: rpmyers1   Posted on: 01/10/06 You are currently: a Guest | Members login | Terms of Use
Reply to Story Reply to Message

Alert moderator to an offensive message

Subscribe to this discussion via Email or RSS

Expect delays  SQLServer | 01/09/06
How is this a "new species" of bug?  jinko | 01/10/06
Won't Happen  yyuko@... | 01/09/06
Ok smart guy.  LinuxHippie | 01/09/06
There's a few  rpmyers1 | 01/10/06
nice but wasnt' intended for you.  LinuxHippie | 01/10/06
Insults all programmers?  rpmyers1 | 01/10/06
I Say Your Partially Correct  IceTheNet@... | 01/11/06
Some facts please  LinuxHippie | 01/11/06
Policy versus skill  Still Lynn | 01/17/06
MS vows to scour software code to uncover potential security problems  gbray@... | 01/09/06
You betcha ...  gary.douglas@... | 01/09/06
Exactly right!  Leria | 01/09/06
Badd assumption  rpmyers1 | 01/10/06
Your right... not  sx_fusion | 01/10/06
Hey Now  IceTheNet@... | 01/11/06
Myth Busting Time!  Spikey_Mike | 01/18/06
So what have they been doing until now?  davidr69 | 01/09/06
Same Old Hyper-criticism  doting.daddy | 01/09/06
I've seen software without bugs  maldain | 01/09/06
RE: Same Old Hyper-criticism  duane.wills@... | 01/09/06
RE: Same Old Hyper-criticism  reglahsize | 01/09/06
OpenBSD  davidr69 | 01/09/06
Hyper-Criticism  CodeBubba | 01/09/06
RE: Armchair Quarterbacks  duane.wills@... | 01/09/06
What about all those other OSs  jumpa | 01/09/06
Stick to designing hardware  toadlife | 01/09/06
RE: What about all those other OSs  Paul Brian | 01/09/06
Re:amr chair quarter backs.  GreyGeek | 01/09/06
Re:Same old hyper-criticism  GreyGeek | 01/09/06
Same Old Hyper-response  tbbrickster_z | 01/09/06
Linux is not the target because ...  craig@... | 01/09/06
ps2 or xbox  hipparchus2001 | 01/09/06
XBox  tracy anne | 01/09/06
Oh Yes it is real fun to hack desktops  IceTheNet@... | 01/11/06
Get the facts!  Spikey_Mike | 01/18/06
Paying lip service  Rick_K | 01/09/06
Abandon everything?  htotten | 01/09/06
You mean like Apple did?  Spikey_Mike | 01/18/06
roflmao  ~doolittle~ | 01/09/06
Is it just me, or haven't we heard this from Microsoft before?  anogee | 01/09/06
Anything is better than 'ME'  The-Bytemaster | 01/09/06
ME worked great for me  rbrucecarter | 01/09/06
If you haven't done a save in 4 hours...  Anton Philidor | 01/09/06
The most secure version of Windows ever shipped.  pwatson | 01/09/06
RE: The most secure version of Windows ever shipped.  duane.wills@... | 01/09/06
D?j? vu  Richard Flude | 01/09/06
Praise Windows, attack Linux - the ZDNet way  fireman949 | 01/09/06
Dude - almost nobody cares ---  rbrucecarter | 01/09/06
Nobody except...  duane.wills@... | 01/09/06
Amen brother...  sx_fusion | 01/10/06
You aren't helping anyone  LinuxHippie | 01/10/06
Don't  sx_fusion | 01/10/06
Don't  Protagonistic | 01/10/06
Paving the road  Spikey_Mike | 01/18/06
Certainly for worse (NT)  Anti_Zealot | 01/09/06
nobody cares about Linux.  clockmendergb@... | 01/09/06
Let me ask you something  sx_fusion | 01/10/06
My 2 cents  LinuxHippie | 01/10/06
I use Linux on the desktop  sx_fusion | 01/10/06
LH again a correction  IceTheNet@... | 01/11/06
My2C  chromeronin | 01/11/06
The MS answer: upgrade to dual core  ~doolittle~ | 01/12/06
nobody cares about Linux  Protagonistic | 01/10/06
Linux is not better than windows  IceTheNet@... | 01/11/06
Attacks on WINE misplaced...  GreyGeek | 01/09/06
Let me help...  jinko | 01/09/06
Let me help...by fixing a different bug  The-Bytemaster | 01/09/06
I'll remember that on the next buffer overrun...  jinko | 01/10/06
Not a problem with coding practice...  Spikey_Mike | 01/18/06
What would Mozilla do?  duane.wills@... | 01/09/06
I don't think they will succeed...  d0ti5 | 01/09/06
I have to agree . . .  pikeman666@... | 01/10/06
Microsoft vows to clean up bugs  dtsherwood | 01/09/06
MS and Security  gbray@... | 01/09/06
Virus or bugs  rtreitner | 01/09/06
RE: Virus or bugs  duane.wills@... | 01/09/06
Please be clear  LinuxHippie | 01/09/06
Yeah?  rpmyers1 | 01/10/06
never embedded a virus  plumnilly | 01/10/06
Ummm didn't they do this earlier  Linux User 147560 | 01/09/06
No this time they really mean it.  mobrien_12@... | 01/09/06
ROFLMAO!  Linux User 147560 | 01/09/06
LMFAO .... I CAN SEE IT NOW ....  rick752 | 01/09/06
yeah, and it produced excellent results  toadlife | 01/09/06
LOAD OF CRAP  Kid Icarus-21097050858087920245213802267493 | 01/09/06
Management is the Bug  mighetto | 01/09/06
Re:Management is the bug.  GreyGeek | 01/09/06
I've investigated this article and ...  George Jay | 01/10/06
Microsoft to hunt for new species of Windows bug  lonfjjr@... | 01/09/06
Microsoft never had a clue  georgep_z | 01/09/06
Funny...  Anti_Zealot | 01/09/06
Allchin on Vista: "It's Not Going to Work"  Spikey_Mike | 01/18/06
unbeleivable a graphics file format with executable code inside  hipparchus2001 | 01/09/06
Add to that...  Spikey_Mike | 01/18/06
MS should release Windows source ...  Too Old For IT | 01/09/06
MS should release Windows source ...  TheDread | 01/09/06
Microsoft is king and will be attacked by hackers  erniem1970@... | 01/09/06
Very well said!  Paul Brian | 01/09/06
But this is parking your car downtown with a steal me sign & keys  hipparchus2001 | 01/09/06
Attn: Mike Cox, What Does Your Rep Have to Say??? (nt)  tbbrickster_z | 01/09/06
Microsoft to hunt for new species of Windows bug  Loverock Davidson | 01/09/06
Microsoft looking out for Microsoft  tracy anne | 01/09/06
The 0-day WMF exploit was not a bug. It was a feature.  ~doolittle~ | 01/09/06
Microsoft to hunt for new species of Windows bug  plumnilly | 01/10/06
The real bottom line is...  Spikey_Mike | 01/18/06
Bad assumption  Real World | 01/09/06
How do you know they're not?  tracy anne | 01/09/06
Au contraire  Real World | 01/10/06
the "defect" revelation here is win16 in Ring0 on win32/win64  wti | 01/10/06
wow you are smart (not)  LinuxHippie | 01/10/06
Smart guy (NOT)  Spikey_Mike | 01/18/06
The real story on worm's,viruses and Microsoft  drivethruguy69 | 01/10/06
No hackers needed.  s_gamgee | 01/10/06
Win Systems Bogging Down  Safemode196 | 01/11/06
Fixed in record time  Protagonistic | 01/10/06
Q.: Can Microsoft clean up the bugs?  Betelgeuse58 | 01/10/06
Microsoft Bug Fix Lawsuit  karihouse | 01/10/06
My linux guru tells me that they aren't enough eyes  Boot_Agnostic | 01/10/06
This is NOT new  CobraA1 | 01/10/06
Windows Bugs  mjd420nova | 01/10/06
Yep, we can spell UNIX and open source  Boot_Agnostic | 01/11/06
No new bugs here, just incompetence?  scotasys | 01/16/06

What do you think?

SponsoredWhite Papers, Webcasts, and Downloads

advertisement
Premier Vendor Content Whitepapers, webcasts & resources from our Power Center Sponsors
advertisement
  • Smart Tech Expert advice on innovations in healthcare and the green technologies that make it happen. Find out more
  • Smart Business Discussion and advice on management issues that revolve around making your world smarter and more useful. More Smart Advice
  • Smart People The best and worst moves in the management and strategy trenches. Learn More