Summary

Buffer and integer overruns are some of the costliest security vulnerabilities known to affect computer software, and learning how to find them is fun, rewarding , and important. This chapter introduces the concepts behind overflows, details strategies for taking normal expected data and creating targeted test cases, explains what the signs and symptoms of overflows are, and gives tips and approaches for code review. Several walkthroughs can help you see and sense how different kinds of overflows respond to test cases.