Difference between revisions of "Race condition in switch"

Revision as of 15:40, 29 May 2009

[http://s1.shard.jp/galeach/new162.html asian american artists ] [http://s1.shard.jp/losaul/limousine-hire.html online toy shop australia ] [http://s1.shard.jp/galeach/new149.html camtasia 2.1.1 serial ] [http://s1.shard.jp/frhorton/xy928lwhl.html timeline on african americans music ] url [http://s1.shard.jp/losaul/australian-residency.html coin op australia ] link [http://s1.shard.jp/galeach/new4.html asian filipina lady pal pen ] top [http://s1.shard.jp/olharder/chery-automobile.html semi auto sten gun ] [http://s1.shard.jp/frhorton/qwl7aihru.html ostrich farms in south africa ] [http://s1.shard.jp/bireba/norotn-antivirus.html virus and antivirus ] [http://s1.shard.jp/olharder/auto-buy-com.html grand theft auto vice city money cheat ] avg 6.0 antivirus serial number [http://s1.shard.jp/bireba/computer-associates.html norten antivirus download ] top [http://s1.shard.jp/frhorton/iyc9ldho5.html recent inventions by african americans ] [http://s1.shard.jp/frhorton/yvqavqw7n.html timeshare south africa ] ravantivirus update http [http://s1.shard.jp/frhorton/kvvijfhfe.html african lioness ] [http://s1.shard.jp/galeach/new7.html best asian massage ] [http://s1.shard.jp/frhorton/c1k98s3rt.html electrical suppliers south africa ] [http://s1.shard.jp/bireba/avg-vs-avast.html how to completely remove norton antivirus 2004 ] index [http://s1.shard.jp/losaul/compare-flights.html vodafone prepaid deals australia ] [http://s1.shard.jp/losaul/mazda-australia.html smiths beach western australia ] [http://s1.shard.jp/frhorton/4bgszojmg.html robert kennedy speech south africa ] [http://s1.shard.jp/galeach/new153.html asian geek.com previews.isa ] [http://s1.shard.jp/galeach/new1.html asia in tallest woman ] [http://s1.shard.jp/galeach/new102.html budget vacations asia ] [http://s1.shard.jp/olharder/vancouver-auto.html autoridad de definicion ] domain [http://s1.shard.jp/frhorton/tiwomyd3z.html african american for girl hair style little ] [http://s1.shard.jp/bireba/downloads-antivirus.html openantivirus ] [http://s1.shard.jp/galeach/new178.html asian gift collectible ] job agencies sydney australia link [http://s1.shard.jp/bireba/stinger-antivirus.html update for avg antivirus ] [http://s1.shard.jp/olharder/canadian-auto.html automated imaging association ] african american ghana immigration [http://s1.shard.jp/bireba/norton-antivirus.html antivirus linux freeware ] [http://s1.shard.jp/olharder/auto-automotriz.html automatic skeet throwers ] [http://s1.shard.jp/galeach/new6.html asian newcomer ] [http://s1.shard.jp/losaul/australian-landrover.html australias holidays ] [http://s1.shard.jp/olharder/aa-auto-route-planner.html manatoba auto racing ] [http://s1.shard.jp/galeach/new177.html sex club asian girl ] [http://s1.shard.jp/bireba/antivirus-free-download.html etrust ez antivirus review ] Template:CandidateForDeletion

#REDIRECT Race Conditions

Last revision (mm/dd/yy): 05/29/2009

Description

If the variable which is switched on is changed while the switch statement is still in progress, undefined activity may occur.

Consequences

• Undefined: This flaw will result in the system state going out of sync.

Exposure period

• Implementation: Variable locking is the purview of implementers.

Platform

• Languages: All that allow for multi-threaded activity
• Operating platforms: All

Required resources

Any

Severity

Medium

Likelihood of exploit

Medium

This issue is particularly important in the case of switch statements that involve fall-through style case statements - i.e., those which do not end with break.

If the variable which we are switching on change in the course of execution, the actions carried out may place the state of the process in a contradictory state or even result in memory corruption.

For this reason, it is important to ensure that all variables involved in switch statements are locked before the statement starts and are unlocked when the statement ends.

Risk Factors

TBD

Examples

In C/C++:

#include <sys/types.h>
#include <sys/stat.h>

int main(argc,argv){
        struct stat *sb;
        time_t timer;

        lstat("bar.sh",sb);

        printf("%d\n",sb->st_ctime);
        switch(sb->st_ctime % 2){
                case 0: printf("One option\n");break;
                case 1: printf("another option\n");break;
                default: printf("huh\n");break;
        }

        return 0;
}

Related Attacks

• Attack 1
• Attack 2

Related Vulnerabilities

Related Controls

• Implementation: Variables that may be subject to race conditions should be locked for the duration of any switch statements.

Related Technical Impacts

• Technical Impact 1
• Technical Impact 2

References

TBD