The accidental deletion of a data-structure sentinel can cause serious programming logic problems.
Use an abstraction library to abstract away risky APIs. Not a complete solution.
Run or compile the software using features or extensions that automatically provide a protection mechanism that mitigates or eliminates buffer overflows. For example, certain compilers and extensions provide automatic buffer overflow detection mechanisms that are built into the compiled code. Examples include the Microsoft Visual Studio /GS flag, Fedora/Red Hat FORTIFY_SOURCE GCC flag, StackGuard, and ProPolice.
Use OS-level preventative functionality. Not a complete solution.
Our security experts can help you identify and remediate CWE-463 vulnerabilities in your codebase.
Get Security Assessment