search

fi01 / CVE-2015-3636

PoC code for 32 bit Android OS
131 stars 88 forks source link

Crash during the vuln sockets creations #12

Closed alien0x00 closed 8 years ago

alien0x00 commented 8 years ago

I got a crash during the creation of the vuln sockets: [ ] Unable to handle kernel paging request at virtual address 00200200

The mapping of the 0x00200000 page is successful.

jduck commented 8 years ago

You have not included nearly enough information. Please let us know which device model, which firmware (output from getprop ro.build.fingerprint), etc.

Potential causes range from a race condition where the page becomes unmapped (process exit, unmap, etc) to the use of PAN (privileged access never). It could even be something custom getting in the way...

alien0x00 commented 8 years ago

The device: samsung S4 mini with a cyanogenmod 12.1 (5.1.1). The kernel version: 3.4.0 getprop output: http://pastebin.com/xuupS3c1

It seems to me that the issue is due to a race condition where the page becomes unmapped, as you said. From the main process, I can see the page correctly mapped. Do you know how can I solve this issue?

alien0x00 commented 8 years ago

Solved, it was a race condition where the page becomes unmapped.

yuwezyu commented 4 years ago

Solved, it was a race condition where the page becomes unmapped.

how did you solve this problem?