Testing for Buffer overflow (OTG-INPVAL-014)

Summary

To find out more about buffer overflow vulnerabilities, please go to Buffer Overflow pages.

See the OWASP article on Buffer Overflow Attacks.

See the OWASP article on Buffer Overflow Vulnerabilities.

How to test

Different types of buffer overflow vulnerabilities have different testing methods. Here are the testing methods for the common types of buffer overflow vulnerabilities.

• Testing for heap overflow vulnerability
• Testing for stack overflow vulnerability
• Testing for format string vulnerability

Code Review

See the OWASP Code Review Guide article on how to Review Code for Buffer Overruns and Overflows Vulnerabilities.

Remediation

See the OWASP Development Guide article on how to Avoid Buffer Overflow Vulnerabilities.