diff -r 99d408cfcfb3 -r 01f7e799e6ce slides/slides04.tex --- a/slides/slides04.tex Tue Oct 22 12:35:11 2013 +0100 +++ b/slides/slides04.tex Tue Oct 22 14:47:43 2013 +0100 @@ -116,7 +116,7 @@ %%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%% \begin{frame}[fragile] -\frametitle{Buffer Overflows} +\frametitle{D-Link Router, Buffer Overflows} \begin{verbatim} As a proof-of-concept, the following URL allows @@ -126,7 +126,7 @@ curl http:///post_login.xml?hash=AAA...AAABBBB -The value of the "hash" HTTP GET parameter consists in +The value of the "hash" HTTP GET parameter consists of 292 occurrences of the 'A' character, followed by four occurrences of character 'B'. In our lab setup, characters 'B' overwrite the saved program counter (%ra).