Vulnerability Development: Re: argc issue

[3APA3A <3APA3A () SECURITY NNOV RU>]

Dear padre () correo ugr es,

--Tuesday, May 23, 2006, 9:51:58 PM, you wrote to vuln-dev () securityfocus com:

pcue> int main (int argc, char **argv)

pcue> But the main issue is " if (argc) exit(0);" . How can I change the argc
pcue> variable so it contais the value of 0?.

you can set argc of 0 with

execl(app, NULL);

but   your   chances   to   control   argv[1]  are  very  low.  In  most
implementations  your  argv[1] will be last NULL record from envp array.
You can try to play with envp though.



-- 
~/ZARAZA
http://www.security.nnov.ru/