.NET and buffer overruns

From: spider (spider_at_web.com)
Date: 07/28/03 

Date: Mon, 28 Jul 2003 13:12:04 -0700

Hi,

I've been reading "Writing Secure Code" from Microsoft Press and it seems
that buffer overruns
apply to C and C++ programmers. Are .NET C# developers protected from buffer
overruns by the CLR? If not could you point me to coding practices to
prevent them in .NET.

Also, does strong naming the assembly and modifying the security policy to
trust
this strong name prevent hackers from executing code in the assembly?

Thanks...Ron

Relevant Pages

  • Re: .NET and buffer overruns
    ... This message is provided "AS IS" with no warranties, and confers no rights. ... Any opinions or policies stated within it are my own and do not necessarily constitute those of my employer. ... > I've been reading "Writing Secure Code" from Microsoft Press and it seems ... > that buffer overruns ...
    (microsoft.public.dotnet.security)
  • RE: In response to alleged vulnerabilities in Microsoft Visual C++ security checks feature
    ... I have followed Stackguard on this mailing list for quite some time ... "Tools exist to make static buffer overruns more difficult to exploit. ... > surprising coincidences. ... The mention of your name in "Writing Secure Code" is not at all related ...
    (Bugtraq)
  • Re: [Lit.] Buffer overruns
    ... If your programmers don't have access to, ... A craftsman, D, who has (for want of a better ... very few of them needed to know the C spec in great detail. ... buffer overruns is that C is an extraordinarily sharp language. ...
    (sci.crypt)
  • Re: on buffer overflows and insecurity (was returning error from main())
    ... prevent buffer overruns is to write code that does not allow them to ... You must be talking about preventing buffer overruns no matter ... One finds, however, that having prevented bad programmers from ... we have gotten people to use security belts ...
    (comp.lang.c)
  • Re: [Lit.] Buffer overruns
    ... >> But if the product isn't free of buffer overruns, ... Today's commercially successful software products are like bananas: ... Many not sufficiently competent programmers do underestimate. ... >evidence to show that my team's software process is much better ...
    (sci.crypt)