Question

Testing for buffer-overflow in a system can be done manually and has two possible ways.

(a) True

(b) False

I have been asked this question in exam.

I would like to ask this question from Buffer Overflow in section Cyber Security of Cyber Security

Answer 1

The correct answer is (a) True

To elaborate: Testing for buffer-overflow in a system can be done manually, and has two possible ways. One way is to look into the code and check whether the boundary check has been properly incorporated or not. The other way is to make the executable build of the product, feed the application with a huge amount of data and check for abnormal behaviour.