Re: looking for recursion stack overflow exploit

On Wed, 20 Nov 2002 bukys@cs.rochester.edu wrote:

Hi,

Maybe with threads where one thread can smash other threads stack that way. Other thread then may jump into that loop too. :) Unfortunally infinite recursion will crash very soon, so you need special trick like the function arguments that are pushed on stack should contain adresses the other thread is then using for retaddr or saved ebp. Its asking for headache but I assume you can somehow do it with threads.

Sebastian

> While a recursion-induced stack overflow can obviously lead to a

-- 
~
~ perl self.pl
~ $_='print"\$_=\47$_\47;eval"';eval
~ krahmer@suse.de - SuSE Security Team
~