Microsoft® Windows® 2000 Security Handbook

Resolving Problems in Code

Now that you have found a security bug, what are you going to do about it?

This depends on the situation. Of course, the bug needs to be fixed, but this chapter addresses both security researchers and code auditors, and the piece of code with the bug might not always be within your control.

When You Have the Code

Let's first start with the situation in which you or someone else has found a bug in your code. Because this is your code, you should be able to load it in your development environment and use a debugger to locate the situation.

There are some important things to consider here. Obviously, due to the complexity of this task, this chapter won't be able to cover all aspects of debugging code, but it can cover ...