buffer overflow possible in CNI string-handling code?

Mon Mar 11 18:15:00 GMT 2002

Bryce McKinlay <bryce@waitaki.otago.ac.nz> writes:
> The end of the stack is guarded by a write-protected page.

Okay, here's where I show my ignorance...
So why do buffer overflows work?
Wouldn't the overflowing strcpy() [that's usually the offending call,
right?] hit the write-protected page and cause a fault?
 - a
-- 
"If I put copyrighted material into the 'chewy nougat center', I can
 claim the crunchy chocolate coating is an 'Access Control
 Mechanism'." --lynx_user_abroad
Why Windows NT/2k/XP is unreliable: www.zappadoodle.com