Tag Info

New answers tagged

4

First note that those "safe" functions are only marginally safer than the functions they replace. Most of those "safe" functions take an extra parameter informing it of the size of the destination buffer (which they use to check for overflows) and they check that no null pointers are passed where they shouldn't. This can catch certain errors, but not all of ...


0

There is no solution by static analysis, but it's quite easy to do what you want using an API monitor like this: http://www.rohitab.com/apimonitor. You can run the target software, place a breakpoint on the CreateProcess or ShellExecute (or anything else you like) and then either allow it to go ahead or block it. Nice product, highly recommended for ...


1

This is an impossible problem. It's not possible to predict the behaviour of a computer program entirely accurately without running it. In fact, it isn't even possible to predict whether it will terminate or not - this is called the Halting Problem, and it's a longstanding fundamental limitation on static code analysis. A forteriori, it's also not ...



Top 50 recent answers are included