C0deH4cker / PwnableHarness

Manage building and deploying exploitation challenges with ease
MIT License
57 stars 4 forks source link

Need to avoid calling setenv() on the path to handle_connection() #2

Closed C0deH4cker closed 6 years ago

C0deH4cker commented 6 years ago

Calling setenv() does a hidden malloc() in order to copy the environment variables from the stack onto the heap where it has space to add more environment variables. We want to avoid that in all paths to handle_connection() so that the execution environment is the same between running locally and as a server.