UGN Security Forums
My ProfileMember DirectoryLogin
Search our ForumsView our FAQView our Site Rules
View our CalendarView our Active TopicsGo to our Main Page

UGN Security Store
 

Network Sites UGN Security, The GoNix Initiative, Elite Web Gamers, Back of the Web, EveryDay Helper, VNC Web Design & Development
November
Su M Tu W Th F Sa
1
2 3 4 5 6 7 8
9 10 11 12 13 14 15
16 17 18 19 20 21 22
23 24 25 26 27 28 29
30
Sponsored Links
Latest Postings
Latest Reviews
Topic Options
Rate This Topic
#17131 - 01/26/05 09:54 PM overflow and underflow
istar Offline
Junior Member

Registered: 01/26/05
Posts: 1
Loc: croatia
i was reading an computer magasine and i read something i never encoutered before: integer overflows and underflows so i wondered if you can answer this question: what are int overflows and underflows?
_________________________
//I don't agree whith that you just said but i will defend your write to say it for the rest of my life//
- S.G.Tallentyre

Top
Sponsored Links
      
#17132 - 01/28/05 06:34 AM Re: overflow and underflow
Spyrios Offline
UGN Member

Registered: 03/15/04
Posts: 419
Loc: VA
Most security vulnerabilities are software bugs—in the strict sense of the word. And most of these bugs would be considered innocuous, perhaps in an environment where people aren't trying to break the program. But then, we come to the Internet.

The most famous class of such bugs is the buffer overflow, by now the kind of term that makes it into your local paper when another Windows flaw makes the news. But in recent years a new type of vulnerability is being exploited more frequently: Integer manipulation bugs.

Not all integer manipulation bugs are integer overflows—some of them are underflows. Still, the class of error is usually referred to generically as overflows.

The basic problem is that integers in computers have a finite range. For instance, the rage of a signed 16-bit integer is -32767 to 32767.

What happens if arithmetic moves the value out of that range? The number could easily turn out to be massively larger or smaller than the expectation of the program's logic. Another example is a number that turns out to be negative instead of positive, changing the result of an "if (a
And then there are errors relating to the effects of integer promotion. When operations are made on integers of different sizes, say a short and a long, the smaller one is promoted temporarily to the larger size, and the result is potentially truncated back to the smaller size.

So what can go wrong just because a number is not what it should be? Some of those numbers are used for important stuff.


Source
_________________________
D, world destruction
Over and overture
N, do I need
Apostrophe T, need this torture?-They Might Be Giants

Top

Featured Member
Registered: 10/28/14
Posts: 1
Forum Stats
2151 Members
46 Forums
35789 Topics
70959 Posts

Max Online: 1567 @ 04/25/10 05:20 AM
Top Posters
UGN Security 28950
Gremelin 7193
§intå× 3255
SilentRage 1273
Ice 1146
pergesu 1136
Infinite 1041
jonconley 955
Girlie 908
unreal 860
Newest Members
HushHush, golqm, Tim050, Gecko666, defghi795767
2150 Registered Users
Who's Online
0 registered (), 601 Guests and 363 Spiders online.
Key: Admin, Global Mod, Mod
Latest News


Donate
  Get Firefox!
Get FireFox!