Re: Raw Payload Expressions - out of bounds write?
Sunny73Cr <[email protected]>
| Newsgroups | gmane.comp.security.firewalls.netfilter.general |
|---|---|
| Message-ID | <GkTCZ4QMPjhS04MCXYiLoDrM7d866Suc7ALxvplJpr9bcr6HRlooJ6_xsL4TUjr6Svkztc5Gz9FOqzQAON_GvpjFyPGPpUqaE_sGaBiNBgc=@protonmail.com> |
> this is in bits. > [ payload load 1 byte @ inner header + 6 bytes => reg 1 ] > [ bitwise reg 1 = ( reg 1 & 0xc0 ) ] > [ payload write reg 1 => 1 byte @ inner header + 6 bytes ... ] haha [ payload load 1 byte (8 bits) @ inner header + 7 bytes (56 bits) => reg 1 ] [ bitwise reg 1 = ( reg 1 & 0xc0 ) ] [ payload write reg 1 => 1 byte (8 bits) @ inner header + 7 bytes (56 bits) ... ] I suppose you are correct there, I forgot to adjust the offset. sunny