Re: Raw Payload Expressions - out of bounds write?

Sunny73Cr <[email protected]>
Newsgroups gmane.comp.security.firewalls.netfilter.general
Message-ID <GkTCZ4QMPjhS04MCXYiLoDrM7d866Suc7ALxvplJpr9bcr6HRlooJ6_xsL4TUjr6Svkztc5Gz9FOqzQAON_GvpjFyPGPpUqaE_sGaBiNBgc=@protonmail.com>
> this is in bits.

> [ payload load 1 byte @ inner header + 6 bytes => reg 1 ]
> [ bitwise reg 1 = ( reg 1 & 0xc0 ) ]
> [ payload write reg 1 => 1 byte @ inner header + 6 bytes ... ]

haha

[ payload load 1 byte (8 bits) @ inner header + 7 bytes (56 bits) => reg 1 ]
[ bitwise reg 1 = ( reg 1 & 0xc0 ) ]
[ payload write reg 1 => 1 byte (8 bits) @ inner header + 7 bytes (56 bits) ... ]

I suppose you are correct there, I forgot to adjust the offset.

sunny
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.