there is no need to apologise. if i am wrong, i am wrong. i must say, this is the first (or second..) time i've heard of such an attack. and, whilst i'm not sa

there is no need to apologise. if i am wrong, i am wrong. i must say, this is the first (or second..) time i've heard of such an attack. and, whilst i'm not saying you're incorrect, i will say this - if you take user input and act upon it without validation, you're going to have a bad time. realloc does exactly what it says it will do. is this a fault of realloc, or the programmer that wrote that code? my opinion is that it's a fault of the programmer. and i can already see that others disagree with that. but that's just my opinion.