You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Currently all bytes are allowed in autorop, which cuases issues if it happens to e.g. find a gadget with an 0a byte for input that is captures via e.g. gets.
First step would be "preferential" bad bytes so that padding rets are picked without such an address (easy), warning if there are unavoidable bad bytes (easy), making rop chains etc. without such addresses in general (hard / more dependencies?).
The text was updated successfully, but these errors were encountered:
Currently all bytes are allowed in autorop, which cuases issues if it happens to e.g. find a gadget with an
0a
byte for input that is captures via e.g.gets
.First step would be "preferential" bad bytes so that padding
ret
s are picked without such an address (easy), warning if there are unavoidable bad bytes (easy), making rop chains etc. without such addresses in general (hard / more dependencies?).The text was updated successfully, but these errors were encountered: