原始文献 / 论坛帖 / Re: Bitcoin and buffer overflow attacks
Re: Bitcoin and buffer overflow attacks
Bitcointalk · 2010-12-11 13:32:37 UTC
引用自 da2ce7（2010 年 12 月 11 日 05:49:22 AM）（https://bitcointalk.org/index.php?topic=2208.msg29095#msg29095）：直接往 IP 地址转账，看起来是个明显的攻击面。
你得先找到一个把它打开的人。它默认是关的。
引用自 witchspace（2010 年 12 月 11 日 09:59:40 AM）（https://bitcointalk.org/index.php?topic=2208.msg29124#msg29124）：没法绝对保证没有缓冲区溢出攻击。不过用一种没有缓冲区溢出、会检查数组下标的语言（Python、Java、C#……）实现客户端会有帮助。
全是 STL。几乎没有缓冲区。
英文原文
Quote from: da2ce7 on December 11, 2010, 05:49:22 AM（https://bitcointalk.org/index.php?topic=2208.msg29095#msg29095）direct to IP address transfers seems like a obvious surface area to attack.
If you ever find anyone who turned it on. It's disabled by default.
Quote from: witchspace on December 11, 2010, 09:59:40 AM（https://bitcointalk.org/index.php?topic=2208.msg29124#msg29124）There is no way to be absolutely sure that there are no buffer overflow attacks. Although it would help to implement the client in a language that doesn't have buffer overflows because it checks array indices (Python, Java, C#, ...).
It's all STL. There are almost no buffers.