首先介绍缓冲区溢出机制和基于缓冲区溢出的攻击形式,从C程序员的角度讨论了三类常用的库函数在调用时可能引发的安全问题,并详细分析了缓冲区溢出的内在原因及可能被利用的攻击方法。如果在编程时能针对这些库函数的调用有意识地采取应对措施,无疑将减少缓冲区溢出漏洞,提高程序的安全性能。- Firstly the paper introduces buffer overflow and the potential attack based on it, then from the view of a C programmer, to discusse program security when three kinds of common used lib functions were called, finally it try to analysis the inner mechanism that cause buffer overflow. It would be helpful to minimize buffer overflow and improve the security of the program if we take actions consciously when calling these lib functions.