为什么缓冲区溢位是安全性问题？
事实上，缓冲区溢位正越来越普遍。
本专栏概述了缓冲区溢位问题。
This column gives an overview of the buffer overflow problem.
但是，缓冲区溢位问题并非已成古老的历史。
But the buffer overflow problem is far from ancient history.
这就是下面四个专栏将讨论缓冲区溢位的原因。
This is why our next four columns will deal with buffer overflow.
什么是缓冲区溢位？
如果在短时间内有很多的变更，缓冲区会溢位。
If there are many changes in a short time, the buffer can overflow.
以上图表中，显示了可以直接归为缓冲区溢位的弱点数。
In chart above, the number of vulnerabilities that can be directly attributed to buffer overflows is displayed.
几十年来，缓冲区溢位一直引起许多严重的安全性问题。
Buffer overflows have been causing serious security problems for decades.
缓冲区溢位攻击是一种最恶名昭彰的软体安全问题。
Buffer overflow attacks are one of the most notorious software security problems.
因此，缓冲区溢位问题常常在标准测试期间是发现不了的。
As a result, buffer overflow problems are often invisible during standard testing.
他们通常是对的，因为没有多少人具有利用堆溢位所需的专门技术。
Often they are right, because there aren't many people who have the expertise required to exploit heap overflows.
让我们更深入地了解某些缓冲区溢位会造成严重安全性隐患的原因。
Let's dig deeper into why some kinds of buffer overflows have big security implications.
目前，我们举的所有利用缓冲区溢位的范例都是针对UNIX系统的。
So far, all our examples of buffer overflow exploits have been for UNIX systems.
有些人认为在Windows程序中寻找缓冲区溢位比在UNIX程序中难。
Some people believe that it's harder to find buffer overflows in Windows programs than in UNIX programs.
例如，外部使用者可以利用的网路伺服器程序中的缓冲区溢位，可能使攻击者登入到机器。
For example, a buffer overflow in a network server program that can be tickled by outside users may provide an attacker with a login on the machine.
为了改进此缺点，基于GOP的整体情况自适应调整I帧的量化参数，从而避免缓冲区溢位与跳帧的问题。
To modify this, we regulate adaptively the quantization parameter of each I-frame according to GOP complexion to avoid the buffer overflow and frame-skipping.
型别转换可以是「扩展」或「缩小」：扩展转换从不会溢位，而且一定成功，但是缩小转换却可能造成资讯遗失，甚至失败。
Type conversions may either be widening or narrowing: widening conversions never overflow and always succeed, whereas narrowing conversions entail the possible loss of information and may fail.
经过改进的菜单栏widget现支持溢位指示器(overflow indicator)，如图2所示，当窗口缩小到无法显示当前所有顶级操作的宽度时，则以溢位指示器的形式指出。
The improved menu bar widget now supports an overflow indicator, shown in figure 2, when the window is sized down to a width that doesn't support displaying all the current top-level actions.
作为一位才华满溢的商标设计师，格雷姆时不时地凭借其奇思妙想引起轰动。
As a particularly awesome logo designer, Graham often makes a stir with his thoughts and opinions.
超量程信号表示溢出状况，可由最高有效位来确定是下溢还是上溢。
An out-of-range signal indicates an overflow condition, which can be used with the most significant bit to determine low or high overflow.
超量程(otr)信号表示溢出状况，可由最高有效位来确定是下溢还是上溢。
An out-of-range signal (OTR) indicates an overflow condition which can be used with the most significant bit to determine low or high overflow.
超量程(otr)信号表示溢出状况，可由最高有效位来确定是下溢还是上溢。
An out-of-range signal (OTR) indicates an overflow condition which can be used with the most significant bit to determine low or high overflow.
应用推荐