Closed ddlws closed 4 years ago
x86 ropchains print out of order if _createNumberNeg is used.
Before patch: rop += rebase_0(0x00024a67) # 0xf7d92a67: pop eax; ret; rop += rebase_0(0x00019aee) # 0xf7d87aee: neg eax; ret; rop += p(0xffffff83)
After: rop += rebase_0(0x00024a67) # 0xf7d92a67: pop eax; ret; rop += p(0xffffff83) rop += rebase_0(0x00019aee) # 0xf7d87aee: neg eax; ret;
Thanks. Merged!
x86 ropchains print out of order if _createNumberNeg is used.
Before patch: rop += rebase_0(0x00024a67) # 0xf7d92a67: pop eax; ret; rop += rebase_0(0x00019aee) # 0xf7d87aee: neg eax; ret; rop += p(0xffffff83)
After: rop += rebase_0(0x00024a67) # 0xf7d92a67: pop eax; ret; rop += p(0xffffff83) rop += rebase_0(0x00019aee) # 0xf7d87aee: neg eax; ret;