Added command injection example and secured examples

1 files changed, 19 insertions, 0 deletions

diff --git a/examples-secure/buffer-overflow/buffer-overflow.c b/examples-secure/buffer-overflow/buffer-overflow.c
new file mode 100644
index 0000000..261a58e
--- /dev/null
+++ b/examples-secure/buffer-overflow/buffer-overflow.c
@@ -0,0 +1,19 @@
+#include <stdio.h>
+#include <string.h>
+
+int main(void)
+{
+	char buf[16];
+	int ok = 0;
+
+	printf("Type admin password: ");
+	fgets(buf, sizeof buf, stdin);
+	buf[strlen(buf)-1] = '\0';
+
+	if (strcmp(buf, "pass123")) printf("\nWrong password!\n");
+	else ok = 1;
+
+	if (ok) printf("\nLogged in as admin.\n");
+
+	return 0;
+}