C / C++ / MFC

Rajesh R Subramanian wrote:

As per their docs, they identify something as a bloodhound exploit 274 if there's a piece of potentially malicious code that attempts to exploit the integer overflow vulnerability in GDI+.

Rajesh R Subramanian wrote:

Symantec themself say that even an innocent program could be identified as malicious due to the "sensitive" nature of the detection technology used for identifying this particular malware

Rajesh R Subramanian wrote:

Apply the patches if that's not already done, and if the problem persists, send your program to Symantec as what's being wrongly detected as malware.

int WinMain(HINSTANCE, HINSTANCE, char*, int)
{ return 0; }

2 bugs found.
> recompile ...
65534 bugs found.

Emilio Garavaglia wrote:

Humm ... What does it have to do with "CreateFile"?

Emilio Garavaglia wrote:

Buzzshit and Bullwords. They have a bug and are trying to sell it as a feature. Not a good behavior for a commercial company.

Emilio Garavaglia wrote:

We're still wating aswer s from them!

class test
{
};

void main()
{
    test test1;
    *((char*)&test1) = 'A';
}

const int num = 3;
char * ptr_p_c[num];
for (int i = 0; i<num; i++)
    ptr_p_c[i] = new char[20];

strcpy_s (ptr_p_c[0], 9, "hi there");
strcpy_s (ptr_p_c[1], 7, "change");

for (int i = 0; i<num; i++)
    delete ptr_p_c[i];

const int N = ??
const char* names[N] = {"...", "...", ...}
char *arr[N];
for(n=0;n<N;n++)
 arr[n] = strdup(names[n]);
// other code
for(n=0;n<N;n++)
 free(arr[n]);

char * ptr_p_c[2];
ptr_p_c[0] = new char[sizeof("hi there")];
strcpy (ptr_p_c[0], "hi there");
ptr_p_c[1] = new char[sizeof("whatever")];
strcpy (ptr_p_c[1], "whatever");
delete ptr_p_c[0];
delete ptr_p_c[1];

char *ptr_p_c[] = { "hi there", "whatever" };

piul wrote:

Believe me, I've tried repeatedly to convince my customer this is not the right way to do things, but unfortunately it is not my decission...

piul wrote:

Believe me, I've tried repeatedly to convince my customer this is not the right way to do things