Buffer overflow attacks in Operating Systems - Practice Problems & Coding Challenges

Challenge - 5 Problems

🧠 Conceptual

intermediate

What is a buffer overflow attack?

Which of the following best describes a buffer overflow attack?

A An attack where extra data is written beyond the buffer's boundary, potentially overwriting adjacent memory.

B An attack that encrypts data in a buffer to prevent access.

C An attack that deletes all data stored in a buffer intentionally.

D An attack that compresses buffer data to save memory space.

💡 Hint

Think about what happens when a program writes more data than a buffer can hold.

A buffer overflow attack happens when a program writes more data to a buffer than it can hold, causing the extra data to overwrite adjacent memory. This can lead to unexpected behavior or security vulnerabilities.

📋 Factual

intermediate

Common cause of buffer overflow

What is a common programming mistake that leads to buffer overflow vulnerabilities?

A Encrypting data before storing it in buffers.

B Using dynamic memory allocation properly.

C Using fixed-size buffers without checking input length.

D Using high-level languages that manage memory automatically.

💡 Hint

Consider what happens if input data is longer than the buffer size.

Not checking the length of input before copying it into a fixed-size buffer can cause data to overflow the buffer, leading to vulnerabilities.

🚀 Application

advanced

Effect of buffer overflow on program behavior

What is a likely result if a buffer overflow overwrites a program's return address on the stack?

A The program may jump to malicious code and execute it.

B The program will automatically fix the overwritten address and continue safely.

C The program will compress the stack to prevent errors.

D The program will encrypt the return address to protect it.

💡 Hint

Think about what happens when the return address points somewhere unexpected.

If the return address on the stack is overwritten, the program may jump to an attacker-controlled location, allowing execution of malicious code.

🔍 Analysis

advanced

Why do modern systems use stack canaries?

What is the main purpose of stack canaries in preventing buffer overflow attacks?

A To compress stack data for faster execution.

B To increase the size of the buffer to avoid overflow.

C To encrypt the stack memory to prevent access.

D To detect if the stack has been overwritten before function returns.

💡 Hint

Consider how a program can know if its stack was tampered with.

Stack canaries are special values placed before the return address. If a buffer overflow overwrites the stack, the canary value changes, allowing the program to detect the attack and stop execution.

❓ Reasoning

expert

Why is using safe functions important to prevent buffer overflow?

Given two functions: strcpy() and strncpy(), why is strncpy() considered safer in preventing buffer overflow?

A <code>strncpy()</code> automatically allocates more memory for the buffer.

B <code>strncpy()</code> limits the number of characters copied, preventing overflow if used correctly.

C <code>strcpy()</code> encrypts the string while copying, which <code>strncpy()</code> does not.

D <code>strncpy()</code> compresses the string to fit the buffer size.

💡 Hint

Think about how limiting copied data size helps avoid overflow.

strncpy() allows specifying the maximum number of characters to copy, which helps prevent writing beyond the buffer size if used properly. strcpy() does not check length and can cause overflow.