Skip to content

Arbitrary write issue  #19

@MinghaoLin2000

Description

@MinghaoLin2000

I audited the source code for this project. I found index accessing the memory is not limited in some op. For instance, below is a example.
case GPT: { registers[instructions[IP + 1]] = stack[SP]; printf("value:%d\n id:%d\n",instructions[IP + 1],IP); IP = IP + 1; break; }
I can control the instructions[IP+1] into arbitrary position, which can exceed the registers. I have attached my poc.
arbitraryWrite_poc.mac.zip

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions