Hacker News new | ask | show | jobs
by Genmutant 4478 days ago
Do you have specifics on why strcat would be vulnerable? Or is it just because "abc"+"def" == "abcd" + "ef"?
1 comments
eru 4478 days ago
That, and length extension attacks (https://en.wikipedia.org/wiki/Length_extension_attack).
link