Re: [PLUG] stack smash

2009-08-01 Thread null null
On Sat, Aug 1, 2009 at 10:01 AM, abhi wrote: >>ret = buffer1 + 13; // ebp + 4 >>works fine for me, try n let me know what u get > > Hi null null(heh) >  I tried but* aint working*. >  What OS, kernel,  gcc do u have? > compile using: -fno-stack-protector option to gcc Doesn't matter what version u

Re: [PLUG] stack smash

2009-07-31 Thread abhi
>ret = buffer1 + 13; // ebp + 4 >works fine for me, try n let me know what u get Hi null null(heh) I tried but* aint working*. What OS, kernel, gcc do u have? Heres the asm of function(): (gdb) disas function Dump of assembler code for function function: 0x08048414 :push %ebp 0x0804841

Re: [PLUG] stack smash issue

2009-07-31 Thread null null
On Fri, Jul 31, 2009 at 5:07 PM, abhi wrote: > Oh and heres the asm code: > gdb code: > (gdb) disas main > Dump of assembler code for function main: > 0x0804844e :lea0x4(%esp),%ecx > 0x08048452 :and$0xfff0,%esp > 0x08048455 :pushl -0x4(%ecx) using gdb: once inside functio

Re: [PLUG] stack smash issue

2009-07-31 Thread abhi
Oh and heres the asm code: gdb code: (gdb) disas main Dump of assembler code for function main: 0x0804844e :lea0x4(%esp),%ecx 0x08048452 :and$0xfff0,%esp 0x08048455 :pushl -0x4(%ecx) 0x08048458 :push %ebp 0x08048459 :mov%esp,%ebp 0x0804845b :push %ecx 0x

[PLUG] stack smash issue

2009-07-31 Thread abhi
Hello all. I m trying to smash(change the return address) the stack. I think i m missing the correct numbers(sue to differences in krnl and gcc versions). Heres the code : #include void function(int a, int b, int c) { char buffer1[5]; char buffer2[10]; int *ret; ret = buffer1 + 9;//I think that