Re: partial analysis of vulndev-1.c

> -----BEGIN PGP SIGNED MESSAGE-----

Without looking and finding the original mail, it sounds like an off by one malloc overflow. So to exploit that, iirc, its

padding[fake fwd][fake bck]padding[amount to reach the fake chunk backwards.

So it would be something like \xf8 or whatever you decide to use.

Hope this helps,
Andrew Griffiths

> -----BEGIN PGP SIGNATURE-----
Received on Wed May 14 00:36:07 2003