Incorrect Error Handling

• Not checking a function's return code is not always harmless.

  • DoS as a result of a disk full, or no memory free.
  • WinNuke – A TCP connection to SMB with OOB data would cause BSOD.

• Sometimes this can lead to more serious problems.

  • ICQ long password login problem

• Sometimes it can even lead to arbitrary code execution.

  • Double free in zlib and many others.