OpenSSL的Heartbleed漏洞原理及简单模拟

#include<malloc.h>
#include<stdio.h>
#include<string.h>
 
#define plen_real 5 //获得的数据包长度
int main(){
  char other1[100] ;memset(other1,'E',100);
  char package_send[plen_real ] = {0xF,'d','a','t','a'};//获得的数据包
  char other2[100] ;memset(other2,'E',100);
  char* pdata = package_send+1;
  int plen_fake = package_send[0];
  char* package_return = (char*)malloc(plen_fake +1 );//新数据包
  memcpy(package_return+1, pdata, plen_fake);
  
  printf("package data send:\n");
  for(int i = 1;i<plen_real;i++) printf("%c",package_send[i]);
  printf("\n");
  
  printf("package data send back:\n");
  for(int i = 1;i<plen_fake +1;i++) printf("%c",package_return[i]);
  printf("\n");
  
  return 0;
}

#include<malloc.h>
#include<stdio.h>
#include<string.h>
 
 
#define plen_real 5
int main(){
  char other1[100] ;memset(other1,'E',100);
  char package_send[plen_real ] = {0xF,'d','a','t','a'};
  char other2[100] ;memset(other2,'E',100);
  char* pdata = package_send+1;
  int plen_fake = package_send[0];
 
  //出错则认为用户恶意操作，不做应答
  if(1 > plen_real ) return 1;
  if(1 + plen_fake > plen_real ) return 1;
 
 
  char* package_return = (char*)malloc(plen_fake +1 );
  memcpy(package_return+1, pdata, plen_fake);
  
  printf("package data send:\n");
  for(int i = 1;i<plen_real;i++) printf("%c",package_send[i]);
  printf("\n");
  
  printf("package data send back:\n");
  for(int i = 1;i<plen_fake +1;i++) printf("%c",package_return[i]);
  printf("\n");
  
  return 0;
}