Original Versions

• Author-supplied POVs: POV1, POV2
• Browse Source

Known Vulnerabilities

• CWE-476 - NULL Pointer Dereference

Author Information

"Brian Caswell" bmc@lungetech.com

DARPA performer group

Lunge Technology (LUNGE)

Description

This is a template challenge binary for use within DARPA's Cyber Grand Challenge showing DECREE IPC can be used to replicate producer-consumer processes.

Feature List

Two binaries are linked together via socket pairs. The first CB brokers data from the network to the second CB via a socket pair.

Vulnerability

Upon specific input (input beginning with 0x4142), there is a opportunity for a Null pointer dereference.

Specifically, in service.c:26 the input buffer is checked for the condition starting with 0x4142. Then pointer p is set to 0. Finally at service:28 p is accessed:

p[0] = 10

Generic class of vulnerability

NULL Pointer Dereference

CWE classification

NULL Pointer Dereference CWE-476

Challenges

This CB is only provided to show only the organizational structure used to create IPC challenge binaries.