????Fuzz Test

????Fuzz Test????

?????????Fuzz?????????в????????????????????????????????????(flaws)??????????????????????????????????????????Ч??????????????????????????????????????Щ????????????????????Щ???????????.

????1990??Miller???????????????Fuzz testing???????????UNIX?????????25????????????2002??Aitel?????????????Fuzz????SPIKE????????????δ????????????????????????е???????ó???????Microsoft??Internet Explorer??Word??Excel???????е?????????2006????????????????????????????????????Ч??ò?????????μ????????????????????Fuzz???????????????????

???????????????????????????????(SDLC)???????????????????????????????????????κ?????SDLC???????????????????????????????????????????????????????????????????????????

????Fuzz?????????

????Fuzz??????????????????????????????????????????????????????й????в??????κ?????????μ?????????????????????λ?????????λ?á?

????Fuzz ???

??????????????????????????????????????к???仯?????????????????????????????????????????????????????ó????о???????????????????????????????????????????????????в???????????????????????????????????????????????????Ρ?

???????У???????????????п?????????????????????ó??????????????????????????????????????????????????????????????

???????????

????API?????

????Memory Boundary Test for GetPluginVersion??

????Buffer is bigger than needed Buffer??

????content is setted to be 0xFF before calling the fuction

????Input buffer with sizeWChar is bigger than the actual value

????Expected Results??The lower bytes of the buffer is the actual vertion information??and other bytes is the setted 0xFF before calling the fuction.

????????????????????????Bug?????Strcpy??memcopy?????????????????????ж???????????????CreateProcess()????????????

??????????????Prefast??Fxcop???????в????

????AP?????

??????в????

??????????????Name????y??????????????Age????y????????????????????????????????????????Χ??????Age?????????????????????????????????????????????ASCII?????????????????????????????????ó?????????????????????????????

?????????????????????????????С?