Michael Howard's Spot the security bug problem.

[Mugunth]

Do anyone know the answer to this problem?

Int16 req;
....
while (true) {
getRequest();
req++;
arr[req] = DateTime.Now;
}

Can you spot this code flaw?

From this link...
http://msdn2.microsoft.com/en-us/library/ms972827.aspx

-
Mugunth

 

[Marc Gravell]

Well, eventually req could wrap around (assuming unchecked), causing an
OutOfRangeException due to -ve index, but...? Nothing obviously security
related, (assuming that everything we need to know is in the question).

Marc

 

[Mufaka]

I don't know if we really have enough info, but index 0 *appears* to be
skipped.

while (true) {
getRequest();
arr[req] = DateTime.Now;
req++;
}

 

[Jesse Houwing]

Hello Marc,

Well, eventually req could wrap around (assuming unchecked), causing
an OutOfRangeException due to -ve index, but...? Nothing obviously
security related, (assuming that everything we need to know is in the
question).

That means that if you send it enough requests the app will crash pretty
quickly, which could be seen as a DoS attack. Though I find it a bit far
fetched in the context it is presented.