1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
|
/* mprotdata.c - Tests wether code in the .data segment can be executed after
* trying to use mprotect() to make it executable.
*
* Copyright (c)2003 by Peter Busser <peter@adamantix.org>
* This file has been released under the GNU Public Licence version 2 or later
*/
#include <stdio.h>
#include <string.h>
#include <stdlib.h>
#include <sys/mman.h>
#include "body.h"
const char testname[] = "Executable data (mprotect) ";
char buf = '\xc3'; /* RETN instruction */
void doit( void )
{
fptr func;
/* Convert the pointer to a function pointer */
func = (fptr)&buf;
/* Try to make the data executable first by using mprotect */
/* Due to an OpenBSD bug PROT_READ is required */
do_mprotect( &buf, 1, PROT_READ|PROT_EXEC );
/* Call the code in the buffer */
func();
do_mprotect( &buf, 1, PROT_READ|PROT_WRITE );
/* It worked when the function returns */
itworked();
}
|
