Programmer's Ultimate Security DeskRef

Programmer's Ultimate Security DeskRef LISP

bit-xor

Prototype: bit-xor 1array 2array

Summary: This function returns TRUE if exactly one but not both of the two conditions are true

Description: This function compares two bit-arrays against an argument and returns TRUE if exactly one but not both of the two conditions are true. Deceiving by name, this function does XOR or "flip" a specified target bit.

Risk: This function is commonly misused and mistaken for a bit-flipping XOR function. Ensure that it is not being used to obfuscate data and that the allocated memory spaces are properly cleaned once this function is finished executing.

Notes: Shouldn't that be: does NOT xor or flip a target bit?

Additional Resources: http://ugweb.cs.ualberta.ca/~c325/gcl/gcl_15.html

Impact: High

Cross References: bit-arrays

break

Prototype: break &;optional format-string &;rest format-args

Summary: This function stops execution and enters debugging mode

Description: This function stops execution and calls the debugger, allowing examination of the stack. A format string with the appropriate arguments can be used to display a message when it occurs.

Risk: The break function can be potentially compromised by an attacker to gain access to sensitive memory-resistant data. In many cases, memory is not effectively cleaned before the application exists if a series of break functions are encountered. It is critical to ensure that an application user may not execute this function on demand, in addition to cleaning all application data from memory before fully exiting the program.

Additional Resources: www.webweasel.com/lisp/doc/b.htm

Impact: Low

Cross References: continue

catch

Prototype: catch...

UNLIMITED FREE
ACCESS
TO THE WORLD'S BEST IDEAS

SUBMIT
Already a GlobalSpec user? Log in.

This is embarrasing...

An error occurred while processing the form. Please try again in a few minutes.

Customize Your GlobalSpec Experience

Category: Digital Parallel and Serial Converters
Finish!
Privacy Policy

This is embarrasing...

An error occurred while processing the form. Please try again in a few minutes.