m4m

  

1) Is this following code segment safe? Explain why or why not? 

int bof (char *str, int size) {

char *buffer = (char *) malloc (size); strcpy (buffer, str);

return 1;

}

Notes: malloc is a C library function that allocates space of a specific size

2) Why does ASLR make buffer-overflow attack more difficult?