Diet LIBC House of Spirit

In this paper, I introduce the reader to a heap metadata corruption against the latest version of diet libc. This allocator is used in embedded systems. In the House of Spirit, an attacker passes a pointer to a fake chunk header to the free API. This chunk can be of almost arbitrary size. The allocator will subsequently insert this fake chunk into the global freelist. The next malloc of the appropriate size will return the fake chunk which may overlap data that may be of benefit to the attacker.

Diet LIBC House of Spirit.PDF

Comments

  1. Casinos Near Me - Map & Directions - Ocean Gaming
    1 Casino Parkway. Ocean Casino, Atlantic City, m w88 New Jersey 08401. Use this guide to find casinos in the beautiful 10 뱃 Ocean 365 벳 region 인싸 포커 in an easy, easy way.

    ReplyDelete

Post a Comment

Popular posts from this blog

C++ Memory Corruption (std::vector) - part 2

Pointer Compression in V8

Linux Kernel Stack Smashing