© 2021 V1ct0r. Powered by Hexo Theme Obsidian
「 Article 」 January 03, 2020
Words count 129k Reading time 1:57
1、easy_pwn
这题是简单题,漏洞点在edit函数:
当我们edit时输入的size大于malloc申请时输入的size,多出10即可实现offbyone,这里malloc时只能小...