{"author_name":"yupo5656","blog_url":"https://yupo5656.hatenadiary.org/","height":"190","provider_url":"https://hatena.blog","version":"1.0","categories":["GCC"],"title":" \u88dc\u8db33: .dtors overwrite \u3092\u3061\u3083\u3093\u3068format string bug\u3067\u3084\u3063\u3066\u307f\u308b\u304b (\u5225\u540d -D_FORTIFY_SOURCE=2 \u306e\u3059\u3059\u3081)","image_url":null,"blog_title":"memologue","provider_name":"Hatena Blog","width":"100%","description":"\u3053\u308c\u306e\u7d9a\u304d\u3067\u3059\u3002 GOT overwrite \u3067\u3082 .dtors overwrite \u3067\u3082\u306a\u3093\u3067\u3082\u3044\u3044\u3093\u3067\u3059\u3051\u3069\u3001main\u95a2\u6570\u3067\u76f4\u63a5\u30e1\u30e2\u30ea\u30924\u30d0\u30a4\u30c8\u66f8\u304d\u63db\u3048\u308b\u306e\u3067\u306f\u306a\u304f\u3066\u3001\u3061\u3083\u3093\u3068(?) format string bug \u3092\u60aa\u7528\u3057\u305f\u66f8\u304d\u63db\u3048\u3092\u8a66\u3057\u3066\u307f\u307e\u3059\u3002\u30ea\u30cf\u30d3\u30ea\u3067\u3059\u3002format string bug \u306e\u89e3\u8aac\u306f\u3001\u3053\u3053\u304c\u79c0\u9038\u3060\u3068\u601d\u3044\u307e\u3059(\u7279\u306b4\u7ae0\u4ee5\u964d)\u3002\u6761\u4ef6\u306f\u524d\u3068\u540c\u3058\u3067\u3001 NX\u3042\u308a ASLR\u3042\u308a RELRO\u306a\u3057 PIE\u306a\u3057 \u3067\u3059\u3002\u307e\u305a\u3001\u6b21\u306e\u3088\u3046\u306a\u95a2\u6570(vuln)\u3092\u6e96\u5099\u3057\u307e\u3059\u3002 static void vuln(const char* s) { printf(s); // <-- exploi\u2026","html":"<iframe src=\"https://hatenablog-parts.com/embed?url=https%3A%2F%2Fyupo5656.hatenadiary.org%2Fentry%2F20060624%2Fp3\" title=\" \u88dc\u8db33: .dtors overwrite \u3092\u3061\u3083\u3093\u3068format string bug\u3067\u3084\u3063\u3066\u307f\u308b\u304b (\u5225\u540d -D_FORTIFY_SOURCE=2 \u306e\u3059\u3059\u3081) - memologue\" class=\"embed-card embed-blogcard\" scrolling=\"no\" frameborder=\"0\" style=\"display: block; width: 100%; height: 190px; max-width: 500px; margin: 10px 0px;\"></iframe>","published":"2006-06-24 00:00:03","url":"https://yupo5656.hatenadiary.org/entry/20060624/p3","type":"rich","author_url":"https://blog.hatena.ne.jp/yupo5656/"}