\documentclass[11pt]{article}
\usepackage{fullpage}
\usepackage{times}

\begin{document}
\begin{center}
CSci 5271 Fall 2024 Exercise Set 1 answers template
\end{center}

You can use this document as a template for submitting your answers to
problem set 1 in a way that will make the structure clearer to
Gradescope. (This template is available from the course web site in
either LaTeX or Google Doc formats). Type your answers on each page
after the question prompt (you can use additional pages, though that
we expect that would rarely be required). We recommend that you write
all your answers electronically, so if you do this, export to a PDF to
submit.  If you would prefer to hand-draw figures, you can also submit
a photo or scan.

You may work on this assignment individually or in a group of 2 or 3
students, and you should submit one set of answers per group.
%Gradescope should record the
%identity of the student who submits (the link is on Canvas)
In addition to using the group submission feature of Gradescope (the
link is on Canvas), as an additional confirmation please write the
name and UMN email address of all of your group members in the boxes
below:

\vspace{10pt}

\begin{tabular}{|p{2.6in}|p{2.6in}|}\hline
Name & UMN email address\\\hline
\vspace{20pt} & \\\hline
\vspace{20pt} & \\\hline
\vspace{20pt} & \\\hline
\end{tabular}

\vspace{10pt}

Question 1 (Threat models and risk assessment, 20 pts):

\newpage

Question 2 (Finding vulnerabilities, 20 pts):

Question 2(a), CGI script

\vspace{4in}

Question 2(b), file operations

\newpage

Question 3 (Overflowing buffers, 20 pts):

\newpage

Question 4 (Reckless programming, 20 pts):

Question 4(a), undesirable behaviors

\vspace{2.75in}

Question 4(b), safer implementation with same interface

\vspace{2.75in}

Question 4(c), safer implementation with interface change

\newpage

Question 5 (Obscure C behavior, 20 pts):

Question 5(a), integer overflow, both factors free

\vspace{2.75in}

Question 5(b), integer overflow multiplying by 7

\vspace{2.75in}

Question 5(c), format string features

\end{document}
