
220 Chapter 6 • Code Auditing and Reverse Engineering
external library/program (reducing the potential for problems within
external portion), or blindly trusting it.Which route you choose
depends on the circumstances.You can probably trust system libraries,
but be suspicious of other third-party code.When in doubt, go with
your instincts. If your instincts are failing you, then be paranoid instead
and don’t trust it—you can never be too cautious.
In this approach, we will also be focusing on a programmatical
approach—that is, we will focus on the actual (mis)uses of certain func-
tions and the programming language in general.We do not focus on
logic-based ...