![]() Basic allocation = MRB_STR_BUF_MIN_SIZE + 1 = malloc(129).The basic allocation of the response buffer in the vulnerable function is: Data buffer – allocation according to “size + 1“ for strings.Metadata structure – relatively small allocation. ![]() MRuby buffer objects, strings (RO) and arrays (RW) for example, consist of two memory data structures: This means that we only need to pivot the stack to a controlled buffer, and the rest will be relatively easy.
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |