Enforcing Stack-Based Information Leaks

Uninitialized data returned to the user represent a source of software vulnerabilities which might lead to information disclosure under certain conditions. In this work, we aim at detection and exploiting uninitialized variables in a given software. We perform static analysis of source code, transform it into a graph that offers full description of the application, look for uninitialized data and classify it. Next we try to retrieve the content of these data and show a way to enforce-the application to modify it as we desire.