Vrydag 02 Junie 2023

C++ Std::Condition_Variable Null Pointer Derreference


This story is about a bug generated by g++ and clang compilers (at least)
The condition_variables is a feature on the standard library of c++ (libstdc++), when its compiled statically a weird asm code is generated.


Any example on the link below will crash if its compiled statically:
 https://en.cppreference.com/w/cpp/thread/condition_variable



In this case the condition_variable.wait() crashed, but this happens with other methods, a simple way to trigger it:




If this program is compiled dynamically the crash doesn't occur:

Looking the dissasembly there is a surprise created by the compiler:


Compilers:
    g++  9.2.1+20200130-2
    clang++ v9

Both compilers are generating the "call 0x00"

If we check this call in a dynamic compiled:




The implementation of condition_variable in github:
https://github.com/gcc-mirror/gcc/blob/b7c9bd36eaacac42631b882dc67a6f0db94de21c/libstdc%2B%2B-v3/include/std/condition_variable


The compilers can't copile well this code in static,  and same happens on  other condition_variable methods.
I would say the _lock is being assembled improperly in static, is not exacly a null pointer derreference but the effects are the same, executing code at address 0x00 which on linux is a crash on most of cases.

More information


  1. Pentest Reporting Tools
  2. Pentest Tools Find Subdomains
  3. Blackhat Hacker Tools
  4. Pentest Box Tools Download
  5. Pentest Tools Tcp Port Scanner
  6. Game Hacking
  7. Pentest Tools Apk
  8. Hacker Tools Hardware
  9. Hack App
  10. Hacker Tools Free Download
  11. Pentest Recon Tools
  12. Pentest Tools Kali Linux
  13. Hacker Search Tools
  14. Hacker Techniques Tools And Incident Handling
  15. Hack Website Online Tool
  16. Hacker Tools For Mac
  17. Tools 4 Hack
  18. Hack Tools Github
  19. Hacking Tools For Windows
  20. Easy Hack Tools
  21. Hacker Tools List
  22. Hacker Tools For Windows
  23. Hacker
  24. Tools For Hacker
  25. Hak5 Tools
  26. Hack Tools For Mac
  27. Wifi Hacker Tools For Windows
  28. Physical Pentest Tools
  29. Hacking Tools For Mac
  30. Tools For Hacker
  31. Hack Tools For Games
  32. Hacker Tools
  33. Hack Website Online Tool
  34. Wifi Hacker Tools For Windows
  35. Hack Tools For Pc
  36. Hacker Techniques Tools And Incident Handling
  37. Hacker Tools Free Download
  38. Blackhat Hacker Tools
  39. Nsa Hacker Tools
  40. Pentest Tools For Android
  41. Hacker Security Tools
  42. Kik Hack Tools
  43. Hacker Tools Free Download
  44. Pentest Tools Port Scanner
  45. Hacking Tools Pc
  46. Hacker Search Tools
  47. Hacking Tools For Mac
  48. Pentest Tools Apk
  49. Hacker Tools Online
  50. What Is Hacking Tools
  51. Hacker Tools For Pc
  52. Hacking Tools Software
  53. Hack Tools Github
  54. Hack Tools Download
  55. Computer Hacker
  56. Physical Pentest Tools
  57. Pentest Tools Online
  58. Hacking App
  59. Hack App
  60. Hacker Tools Windows

Geen opmerkings nie:

Plaas 'n opmerking