On Thu, Jun 08, 2006 at 01:23:42AM -0400, Robert Hudock wrote:
> Question:
> 
> For some reason on suse 10.0 and 10.1 I cannot overflow the buffer so as
> to overwrite EIP no matter what. The attached code is a very simple
> example to illustrate my issue.  Basically the following is what I get
> when the program segfaults on SuSE 10.1.
> 
> However, the attached program produced the expected results  0x41414141
> in main () on FreeBSD versions 5.3 and 6.1, on redhat 7.2
> 
> Any ideas why this is happening?  What sort of security controls are in
> place that prevent this from happening?  Are these controls unique to
> SuSE?
> 
> -----------------------------------
> [EMAIL PROTECTED]:~> gdb ./overflow
> (gdb) run
> Starting program: /home/plato/overflow
> warning: Lowest section in system-supplied DSO at 0xffffe000 is .hash at
> ffffe0b4
> 
> Program received signal SIGSEGV, Segmentation fault.
> 0x080483ec in main () at overflow.c:6
> 6       }

You wrote over the end of the stack page into unallocated memory most likely.

> (gdb)      
> 
> ------------------------------------------
> 
> 
> Regards,
> 
> Robert Hudock

> main () {
> char str1[10];
> strcpy (str1, 
> "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA");

Try a shorter string (perhaps 15 - 20 A) first.

Ciao, Marcus

---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Reply via email to