1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
|
/* mprotstack.c - Tests wether code on the stack can be executed after trying
* to make it executable by using mprotect().
*
* Copyright (c)2003 by Peter Busser <peter@adamantix.org>
* This file has been released under the GNU Public Licence version 2 or later
*/
#include <stdio.h>
#include <string.h>
#include <stdlib.h>
#include <sys/mman.h>
#include "body.h"
char *testname = "Executable stack (mprotect) ";
void doit( void )
{
char buf;
fptr func;
/* Put a RETN instruction in the buffer */
buf = '\xc3';
/* Convert the pointer to a function pointer */
func = (fptr)&buf;
/* Try to make the stack executable first */
do_mprotect( &buf, 1, PROT_READ|PROT_WRITE|PROT_EXEC );
/* Call the code in the buffer */
func();
/* It worked when the function returns */
itworked();
}
|
