3 ms·
Since this involves an out-of-bounds write, anyone care to answer a shower thought? How much harder is it to turn a typical OOB access to a stack-allocated buf
by aidenn0 4y ago
Since this involves an out-of-bounds write, anyone care to answer a shower thought?
How much harder is it to turn a typical OOB access to a stack-allocated buffer into a RCE if the stack grows up instead of down?
- haileys 4y agoIf the stack buffer is allocated in any frame except the leaf frame, just as easy. void outer() { char buff[64]; read_data(buff); process_data(buff); } void process_data(char* buff) { // buffer overflow here is just as bad, even if stack grows up }