General Motors (GM) Interview Question

What could be a vulnerability in accepting a string as a format string for printf in C?

Interview Answer

Anonymous

Nov 26, 2023

We can insert formats in the string for printing addresses, which would essentially print addresses on the stack, breaking ASLR.