6 ms·
I got accidental code execution via glibc?
- alexgartrell 16y agoI'm not usually a meta poster (famous last words), but I would love to see more of this (hardcore systems stuff) on hackers news. As an aside, anyone know other good sites for this kind of stuff?
- lwat 16y agoI like http://www.reddit.com/r/ReverseEngineering/ http://www.reddit.com/r/ReverseEngineering/ and sometimes http://www.reddit.com/r/compsci/ http://www.reddit.com/r/compsci/
- thedeuce 16y agohmm arcane magic proves to be insecure, whats hardcore about it?
- njn 16y agoWell, there is http://news.usethesource.com/ http://news.usethesource.com/
- kaizoku_ 16y agoThis guy doesn't really seem to understand the bug he's trying to explain or actually what happened in his "accident".
- nl 16y agoI think he understands it all too well (and missed explaining a lot of things that a casual reader really needs to know) The code execution is not the point of the story.
- kaizoku_ 16y agoThe title makes me think that the code execution is the point of the story and he doesn't seem to understand how that happens in fnmatch().
- pmjordan 16y agoHe's established that the stack pointer rolls over due to integer overflow. He hasn't established exactly which part of the input data gets copied over the return pointer, but you're only really interested in that if you're trying to exploit the weakness. Establishing that the stack pointer does overflow is sufficient for the purposes of fixing the bug.