MCPcopy Create free account
hub / github.com/GamerHack/GamerHack.github.io / Chain750Base

Class Chain750Base

g2all/700/rop/750.js:161–188  ·  view source on GitHub ↗

Source from the content-addressed store, hash-verified

159}
160
161class Chain750Base extends ChainBase {
162 push_end() {
163 this.push_gadget("leave; ret");
164 }
165
166 push_get_retval() {
167 this.push_gadget("pop rdi; ret");
168 this.push_value(this.retval_addr);
169 this.push_gadget("mov qword ptr [rdi], rax; ret");
170 }
171
172 push_get_errno() {
173 this.push_gadget("pop rdi; ret");
174 this.push_value(this.errno_addr);
175
176 this.push_call(this.get_gadget("__error"));
177
178 this.push_gadget("mov rax, qword ptr [rax]; ret");
179 this.push_gadget("mov dword ptr [rdi], eax; ret");
180 }
181
182 push_clear_errno() {
183 this.push_call(this.get_gadget("__error"));
184 this.push_gadget("pop rsi; ret");
185 this.push_value(0);
186 this.push_gadget("mov dword ptr [rax], esi; ret");
187 }
188}
189
190export class Chain750 extends Chain750Base {
191 constructor() {

Callers

nothing calls this directly

Calls

no outgoing calls

Tested by

no test coverage detected