Spot the Bug!

Alright all, here is the next bug. This one is courtesy of Mike Howard. __ declspec ( noinline ) void * AllocBlocks(size_t cBlocks) { // allocating no blocks is an error if (cBlocks == 0) return NULL; // Allocate enough memory // Upcast the result to Read More...

If you have a few minutes, check this out. It is hilarious!!! www.escapeYESTERWORLD.com Read More...

The first bug was just a warm-up and people were asking for a more difficult bug. What's wrong with this chunk of code, and better yet, how do you fix it? Courtesy of Shanit Gupta, Consultant, Foundstone private HttpCookie SessionIdentifier () { HttpCookie Read More...

Alright all - here is the bug for July 18. This should be an easy one to find. Any takers? :-) #define MAX (50) char szDest[MAX]; strncpy(szDest,pszSrc,MAX); pszDest[MAX] = '\0'; Solution: Nice job on this one, everyone! As most of you found out, there Read More...

We are launching a new section to the MSDN Developer Security Center called spot the bug. This allows you the see if you have what it takes to find a security vulnerability. This will be up on the MSDN Security Developer Center shortly, but in the meantime, Read More...