Lucene search
+L

2 matches found

Hacker One
Hacker One
•added 2017/02/18 1:26 p.m.•28 views

shopify-scripts: Controlled address leak due to type confusion - ASLR bypass

There are several different places in which arguments are treated as fixnums without a prior check for their type. Since mrbvalue is a union that holds all value types, it can cause a mixup between an object pointer and an integer value: cpp typedef struct mrbvalue union mrbfloat f; void p; mrbin...

0.1AI score
SaveExploits0
Rows per page
Query Builder