Programmer's Ultimate Security DeskRef

Prototype: bit-xor 1array 2array
Summary: This function returns TRUE if exactly one but not both of the two conditions are true
Description: This function compares two bit-arrays against an argument and returns TRUE if exactly one but not both of the two conditions are true. Deceiving by name, this function does XOR or "flip" a specified target bit.
Risk: This function is commonly misused and mistaken for a bit-flipping XOR function. Ensure that it is not being used to obfuscate data and that the allocated memory spaces are properly cleaned once this function is finished executing.
Notes: Shouldn't that be: does NOT xor or flip a target bit?
Additional Resources: http://ugweb.cs.ualberta.ca/~c325/gcl/gcl_15.html
Impact: High
Cross References: bit-arrays
Prototype: break &;optional format-string &;rest format-args
Summary: This function stops execution and enters debugging mode
Description: This function stops execution and calls the debugger, allowing examination of the stack. A format string with the appropriate arguments can be used to display a message when it occurs.
Risk: The break function can be potentially compromised by an attacker to gain access to sensitive memory-resistant data. In many cases, memory is not effectively cleaned before the application exists if a series of break functions are encountered. It is critical to ensure that an application user may not execute this function on demand, in addition to cleaning all application data from memory before fully exiting the program.
Additional Resources: www.webweasel.com/lisp/doc/b.htm
Impact: Low
Cross References: continue
Prototype: catch...