From the course: Writing Secure Code in iOS by Infosec
Unlock this course with a free trial
Join today to access over 25,300 courses taught by industry experts.
Format string attack, part 2
From the course: Writing Secure Code in iOS by Infosec
Format string attack, part 2
- Format String Attack, Part 2. Let's talk about Swift's format string in double precision. And let's set up an int of 42, a float of 1.3. It has a precision of six and a double of 100.123456789. Now a double has a precision of 15, but if you don't specify the precision level, it will round it at six. And we'll see that in a moment. And then we're going to say some string is a string and we're going to put in a digit. Here's one of our format strings, one of our placeholders here, one of our specifiers, and then a float and then a double. And then we're declaring the precision level by saying nine. 'Cause if we didn't, it would just cut it off at the sixth number after the dot. So this is a double with a capital F, but we let the precision be nine, not six, which is the default. And we have to say that this, this, and this, these specifiers equate to this, this, and this. The INT_VALUE and the FLOAT_VALUE and the DOUBLE_VALUE. What we expect to see is this output right here. All…
Practice while you learn with exercise files
Download the files the instructor uses to teach the course. Follow along and learn by watching, listening and practicing.
Contents
-
-
-
-
(Locked)
Understanding input risks14m 13s
-
(Locked)
Autocorrect and autofill10m 43s
-
(Locked)
Activity: Disabling autocorrection10m 53s
-
(Locked)
Special characters, part 114m 23s
-
Special characters, part 27m 28s
-
(Locked)
Format string attack, part 17m 58s
-
(Locked)
Format string attack, part 28m 38s
-
(Locked)
Format string attack, part 36m 49s
-
(Locked)
Activity: Playing with format strings9m 53s
-
(Locked)
Input sanitization12m 42s
-
(Locked)
Input sanitization techniques: Regular expressions, part 18m 18s
-
(Locked)
Input sanitization techniques: Regular expressions, part 26m 59s
-
(Locked)
Activity: Regular expressions, part 18m 17s
-
(Locked)
Activity: Regular expressions, part 26m 53s
-
(Locked)
Activity: Regular expressions, part 37m 31s
-
(Locked)
Activity: Sanitizing input, part 110m 44s
-
Activity: Sanitizing input, part 213m 45s
-
(Locked)
Property wrappers9m 27s
-
(Locked)
Activity: Trimming whitespace and newlines with a property wrapper6m 38s
-
(Locked)
Activity: Value clamping with a property wrapper6m 48s
-
(Locked)
Activity: Sanitizing input with a property wrapper7m 18s
-
(Locked)
Null bytes7m 27s
-
(Locked)
Cross-site attacks12m 8s
-
(Locked)
Activity: Exploring XSS attacks10m 10s
-
(Locked)
Code injection14m 51s
-
(Locked)
Activity: Filtering a malicious QR code, part 112m 11s
-
(Locked)
Activity: Filtering a malicious QR code, part 25m 31s
-
(Locked)
SQL injection, part 111m 4s
-
(Locked)
SQL injection, part 24m 13s
-
(Locked)
Object deserialization7m 20s
-
(Locked)
Activity: Installing Alamofire and SwiftyJSON pods3m 36s
-
(Locked)
Activity: Securely working with JSON, part 112m 49s
-
(Locked)
Activity: Securely working with JSON, part 29m 23s
-
WebView protection4m 48s
-
(Locked)
Activity: Protecting users against insecure UIWebView10m 44s
-
(Locked)
-
-
-
-
-
-