General Motors (GM) interview question

What could be a vulnerability in accepting a string as a format string for printf in C?

Interview Answer

Anonymous

26 Nov 2023

We can insert formats in the string for printing addresses, which would essentially print addresses on the stack, breaking ASLR.