10.08.2015 Views

EXPLOITING EMBEDDED SYSTEMS THE SEQUEL!

Exploitation - CanSecWest

Exploitation - CanSecWest

SHOW MORE
SHOW LESS
  • No tags were found...

You also want an ePaper? Increase the reach of your titles

YUMPU automatically turns print PDFs into web optimized ePapers that Google loves.

New Attack Classes• Exploitable NULL pointer vulnerabilities• This common wrapper returns a NULL pointer if passed 0• But what if 0x0 is mapped in memory??void *xmalloc(size_t amt){if (amt != 0) {void *block = malloc(amt);if (block == NULL) {fprintf(stderr, "out of memory\n");exit(EXIT_FAILURE);}return block;}return NULL;}Copyright © 2007 Juniper Networks, Inc. Proprietary and Confidential www.juniper.net 23

Hooray! Your file is uploaded and ready to be published.

Saved successfully!

Ooh no, something went wrong!