本地缓冲区溢出问题的深度分析  

Deep analysis of local buffer overflow problem

作　　者：张超生 ZHANG Chaosheng(School of Computer Science,Sichuan University Jinjiang College,Meishan,Sichuan 620860,China)

机构地区：[1]四川大学锦江学院计算机学院,四川眉山620860

出　　处：《计算机应用文摘》2025年第3期191-192,195,共3页

摘　　要：本地缓冲区溢出是一种普遍且危险的漏洞,广泛存在于各种操作系统和应用软件中。它是指向程序的缓冲区输入超出其容量的数据,导致数据溢出并覆盖相邻内存空间,从而破坏程序的正常运行,甚至可能使攻击者获取程序或系统的控制权。文章详细阐述了本地缓冲区溢出的原理,并通过程序代码示例进行分析,进一步探讨了防范本地缓冲区溢出的有效措施和技术手段。Local buffer overflow is a common and dangerous vulnerability that is widely present in various operating systems and application software.It refers to inputting data into a program̓s buffer that exceeds its capacity,causing data overflow and overwriting adjacent memory space,thereby disrupting the normal operation of the program and even potentially allowing attackers to gain control of the program or system.The article elaborates on the principle of local buffer overflow in detail and analyzes it through program code examples,further exploring effective measures and technical means to prevent local buffer overflow.

关 键 词：缓冲区 溢出 堆栈 拒绝服务 

分 类 号：TP399[自动化与计算机技术—计算机应用技术]