Topic created on: August 28, 2007 17:03 CDT by xeon .

Hi,
reversing a web server, I've seen that all piece of information in the client request get strlen()+memcpy() to appositely allocated heap buffers.
I would like to know if you know some trick to fool strlen(), reporting less or more characters than what there are really, in which way I could try to trigger an heap overflow.
Thanks!