search

vusec / hammertime

GNU General Public License v2.0
145 stars 42 forks source link

offset meaning of FFS simulation (ffs_exploit.py) #3

Open rabBit64 opened 4 years ago

rabBit64 commented 4 years ago

hello, I was wondering what these offsets mean. Must it be this offset?

`class GPGFlip(_PreciseFlipExploit): gpg_bit_offsets_down = [

1->0

    54444, 54477, 54576, 54606, 54750, 55566, 55696, 55896, 56152, 56522, 56711,
    56747, 56764, 56989, 57193, 57362, 57696, 57858, 76774, 77062, 77287, 78053,
    78147, 79073, 79087, 79459, 80097, 80148, 80375,
]
gpg_bit_offsets_up = [
    # 0->1
    56067,  55022, 54936, 80252, 56396, 77713, 77591, 78378, 56554,
    79732, 55531, 55106, 76514, 79364, 77263, 56068, 57035, 54661, 57102,
    78292, 54960, 76364, 55812, 55830
]`

Thank you!