Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Document --collateral switch #52

Closed
SkyLined opened this issue Nov 23, 2017 · 3 comments
Closed

Document --collateral switch #52

SkyLined opened this issue Nov 23, 2017 · 3 comments
Assignees

Comments

@SkyLined
Copy link
Owner

It would be nice if BugId could try to allow the application to continue to run after issues such as use-after-frees or out of bounds reads by temporarily making the inaccessible memory accessible and filling it with a specific marker value. After the instruction that originally cause the AV has been executed without causing an AV this time, the memory should be restored to its original state and the application can continue.

This would allow you to get an idea of what you might be able to do when you can control the memory the application is incorrectly accessing.

@SkyLined SkyLined self-assigned this Nov 23, 2017
@SkyLined SkyLined changed the title Add "colleteral" switch Add "collateral" switch Nov 27, 2017
@SkyLined
Copy link
Owner Author

This is working on my internal build, and turns out to be very useful when trying to determine exploitability of certain issues! :)

@SkyLined
Copy link
Owner Author

This has been released. Proper documentation is needed though.

@SkyLined SkyLined changed the title Add "collateral" switch Document --collateral switch Dec 18, 2017
@SkyLined
Copy link
Owner Author

There's information in the "usage" output of BugIc, so all that is left is a HOW-TO (see #66)

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

1 participant