I just submitted an entry. And it doesn't do any stupid stuff like that. No overruns, no pointer tricks, no funny syntax. All the string handling is even done correctly. My exploit abuses a simple, safe API call that sometimes behaves in a way people don't expect if they're not looking for it.
This is good. I was thinking about how to make this program. Just write the correct program and then look for the innocent-looking spots and insert the malicious code there.
Comments
I just submitted an entry. And it doesn't do any stupid stuff like that. No overruns, no pointer tricks, no funny syntax. All the string handling is even done correctly. My exploit abuses a simple, safe API call that sometimes behaves in a way people don't expect if they're not looking for it.
This is good. I was thinking about how to make this program. Just write the correct program and then look for the innocent-looking spots and insert the malicious code there.
Are you willing to share what the API call is?