Re: [EXPL] (MS04-031) NetDDE buffer overflow vulnerability PoC

From: Steve Friedl (steve_at_unixwiz.net)
Date: 12/31/04


Date: Fri, 31 Dec 2004 10:52:27 -0800
To: Alberto Garcia Hierro <tcpdevil@linuxlover.org>

On Fri, Dec 31, 2004 at 07:09:02PM +0100, Alberto Garcia Hierro wrote:
> +#define Sleep(x) sleep(x)

This isn't the same thing: under Win32, Sleep is in *milliseconds*, while on
UNIX it's *seconds* - that's going to take a long, long time if you run this.

#ifdef unix
# ...
# define Sleep(x) sleep(((x)+500)/1000)
# ...
#endif

-- 
Stephen J Friedl | Security Consultant |  UNIX Wizard  |   +1 714 544-6561
www.unixwiz.net  | Tustin, Calif. USA  | Microsoft MVP | steve@unixwiz.net


Relevant Pages

  • Re: Bugs in donkey.lib
    ... > in milliseconds under Win32 (rather than in seconds, ... I personally think that a milisecond-based sleep is the ... *to same-or-higher priority processes) is a disaster. ...
    (alt.lang.asm)
  • Re: DOS Options
    ... Both MS-DOS and Win32 only ... Parsing is something that was provided by C compilers on both of those ... The was generally defined to be compatible with the Unix C ... parsing of command lines. ...
    (comp.lang.ada)
  • Re: [Full-Disclosure] Re: HTML Help API - Privilege Escalation
    ... >>running as root on a unix machine. ... By the same token on a win32 machine when I hit ctrl alt del ... ... type attacks... ...
    (Full-Disclosure)
  • RE: perl version for windows
    ... not all Perl functionality works on all Unix platforms. ... It is misleading to suggest that Perl on Unix is fine, ... list of caveats from the point of a Win32 developer it would be just ...
    (perl.beginners)
  • Re: perl version for windows
    ... not all Perl functionality works on all Unix platforms. ... find a compatibility issue moving from one Unix to another Unix as from Unix to, ... to Win32; I lost count of the caveats and warnings after thirty or so. ...
    (perl.beginners)