struts

Your mission

Return whether an installed version is older than the version that carries the fix.

today's brief

March 2017. Apache ships a patch for a hole in Struts that lets anyone run commands on your server. Equifax gets the advisory. It also runs a scanner that was supposed to find exactly this, and one public web application still never gets updated. Attackers walk in through it in May and stay for 76 days, leaving with the records of 147 million people. The whole breach comes down to a version number nobody compared properly.

See it in action

is_vulnerable({2,3,31}, {2,3,32}, 3)

Expected result

Your checklist

For your own tracking. Tests grade your code.

installed and fixed each hold parts numbers, most significant first, so 2.3.31 arrives as {2,3,31}.
Compare them position by position from the left. The first position where they differ decides which version is older.
Return 1 when installed is older than fixed, and 0 otherwise. Identical versions are not vulnerable.

More examples

is_vulnerable({2,3,9}, {2,3,10}, 3)

Expected result

is_vulnerable({2,3,32}, {2,3,32}, 3)

Expected result

Constraints

Expected files

version.c

Allowed functions

None. Write every helper yourself.

Back to compete

Solutions

struts

Your mission

Return whether an installed version is older than the version that carries the fix.

today's brief

See it in action

is_vulnerable({2,3,31}, {2,3,32}, 3)

Expected result

Your checklist

For your own tracking. Tests grade your code.

installed and fixed each hold parts numbers, most significant first, so 2.3.31 arrives as {2,3,31}.
Compare them position by position from the left. The first position where they differ decides which version is older.
Return 1 when installed is older than fixed, and 0 otherwise. Identical versions are not vulnerable.

More examples

is_vulnerable({2,3,9}, {2,3,10}, 3)

Expected result

is_vulnerable({2,3,32}, {2,3,32}, 3)

Expected result

Constraints

Expected files

version.c

Allowed functions

None. Write every helper yourself.

Back to compete

Solutions