I hereby claim:
- I am emonti on github.
- I am emonti (https://keybase.io/emonti) on keybase.
- I have a public key whose fingerprint is 9281 C1DF F521 9F9C 2C8F 1608 CB1A 656F B6F8 E778
To claim this, I am signing this object:
Eric Monti emonti
emonti
/ ffi_override_new_bug
Created
January 12, 2010 21:44
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| #!/usr/bin/env jruby | |
| # This code works fine in MRI, but not JRuby. For some strange reason | |
| # jruby cannot superclass FFI::MemoryPointer or FFI::Buffer and override | |
| # the initialize() method. | |
| require 'ffi' | |
| class SpecialBuffer < FFI::Buffer | |
| def initialize() | |
| super(256) |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| ~ export x="() { :;}; echo vulnerable" | |
| ~ bash -c "echo hi" | |
| vulnerable | |
| hi | |
| ~ sh -c "echo hi" | |
| vulnerable | |
| hi | |
| ~ /bin/sh --version | |
| GNU bash, version 3.2.51(1)-release (x86_64-apple-darwin13) | |
| Copyright (C) 2007 Free Software Foundation, Inc. |
NewerOlder