Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add House of fun #82

Open
m1ghtym0 opened this issue Jun 25, 2018 · 1 comment
Open

Add House of fun #82

m1ghtym0 opened this issue Jun 25, 2018 · 1 comment

Comments

@m1ghtym0
Copy link
Member

https://www.alchemistowl.org/pocorgtfo/pocorgtfo18.pdf
Page 22-36 has a nice write-up of the "forgotten" art of frontlinks, by abusing the largebins->nextsize ptrs.

@k4lizen
Copy link
Contributor

k4lizen commented Jan 29, 2025

The provided exploit fails here https://elixir.bootlin.com/glibc/glibc-2.41.9000/source/malloc/malloc.c#L4272 on glibc 2.40
I haven't looked too deep into the technique but I guess it is similar to largebin attack

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants