Re: strlen(NULL) exploitable?

On Mon, May 16, 2005 at 09:29:49PM +0200, Uwe Hermann wrote:
> Using some well-crafted commandline parameters I can force the application
> to segfault. I analyzed this a bit further and found out that the segfault
> is triggered by a strlen(x) call where x is NULL.

AFAIK, NULL dereferencing just causes crashes, nothing else. It might lead to
DoS attacks against servers, but if the program isn't a server, I'd say it's
a bug and not a vulnerability.

// Ulf