Vulnerability Development mailing list archives
Re: Taking the control by abusing array index.
From: <dullien () gmx de>
Date: Mon, 21 Feb 2005 14:15:00 -0800
pointer_array[unsigned_int] = malloc(....);
Try setting the unsigned int so that you overwrite a function ptr. It is kinda
important what ppl do with the malloced space afterwards, you basicallywant malloc() to return memory into which you've previously written shellcode.
Cheers,Thomas Dullien
Current thread:
- Taking the control by abusing array index. Agustin Gianni (Feb 21)
- Re: Taking the control by abusing array index. dullien (Feb 21)
- <Possible follow-ups>
- Re: Taking the control by abusing array index. Vade 79 (Feb 22)
