Re: Where else?

From: Michel Arboi (arboi@yahoo.com)
Date: 11/17/01 

Message-ID: <20011117152946.37741.qmail@web11207.mail.yahoo.com>
Date: Sat, 17 Nov 2001 16:29:46 +0100 (CET)
From: Michel Arboi <arboi@yahoo.com>
Subject: Re: Where else?
To: hungvu@netcom.ca

 --- Hung Vu <hungvu@netcom.ca> a écrit :
> - Dtors
> - _atexit stuff

How do you plan to overwrite these?

> Where else?

IMHO, you should take the problem in a more systematic way. i.e.
you can overwrite:
1) any pointer to the code
2) code itself
3) or any function that generates the code (using a technique from
points 1 or 2)

(3) could mean "just in time compilers" or interpreters, and I am not
sure thise would be worth the cost. Dynamic loader hijack is also in
this category.

(1) C function pointers, return address on stack, method / class
pointer (if this makes sense)...
(2) code segment (if they can be written), code on stack (e.g. glibc &
the GCC trampolines...) or in data segment (some dynamic loaders use
this)

Just my 0.02$

___________________________________________________________
Do You Yahoo!? -- Une adresse @yahoo.fr gratuite et en français !
Yahoo! Courrier : http://courrier.yahoo.fr

Relevant Pages

  • Re: Clib time functions
    ... "In most implementations gmtimeand localtimeretrun a pointer to a ... single static data area that is overwritten on every call. ... the returned structure should be used or copied before any subsequent ... pointer to one of these object types may overwrite the information in ...
    (comp.sys.acorn.programmer)
  • Re: Auto-add sites to Approved Sites
    ... or find out where those sites are stored and find some way to overwrite ... Thanks for the pointer, though. ... Matt ... Prev by Date: ...
    (microsoft.public.windows.inetexplorer.ie6.browser)
  • Re: [OT]
    ... Lawrence Kirby wrote: ... Just overwrite the node to be deleted with a ... This is uncritical -- a SecondToLast node pointer can be afforded ... having list nodes stay at the same location for their lifetime is ...
    (comp.lang.c)
  • Re: module confusion
    ... It just happens to contain a pointer to a module. ... Lawrence, you should have a look at CPython's source code. ... which implies that you can overwrite that memory location. ... But it has nothing to do with "overwriting a memory location" - like you could do in C using pointers. ...
    (comp.lang.python)
Quantcast