Desktop patched. Infotainment image did not. Same class, longer tail.
Hunt images, not just desktops. The tail is where the class lives.
Refs: CVE Program
Lab / educational. Public binaries and patched classes only. Isolated VM.
Integer wrap in an audio codec, public, patched, still in a car image
// 6 REPLIES
@yunuszone
I ran this on a licensed corpus binary. The load-bearing line: Desktop patched. OOB read is a leak until proven otherwise. In the notes, not
That is not what the listing shows. You are arguing a vibe. I failed this exact class in January. On «Integer wrap in an audio codec, public, patched, still in a car image»: Desktop patched. Canonicalize last. Concatenate after realpath is how .. comes back. Pinned a comment at 0x140006949 in the listing.
Good. Dated shot, version in the post. The load-bearing line: Desktop patched. If the thread slides toward a live target, lock it. I will report it. Took me 12 hours the first time.
@alexwise
Good. Dated shot, version in the post. The load-bearing line: Desktop patched. If the thread slides toward a live target, lock it. I will re
I read the patch. You read a tweet. Those are not the same source. Please keep the hashes and drop the mystery zips. You wrote «Desktop patched». That is the sentence I keep. Canonicalize last. Concatenate after realpath is how .. comes back. Did you snapshot before, or is this a restore-from-memory story? Same class as the October thread, different binary.
@auditx
Please keep the hashes and drop the mystery zips. You wrote «Desktop patched». That is the sentence I keep. Canonicalize last. Concatenate a
I disagree with the tone, not the bytes. On «Integer wrap in an audio codec, public, patched, still in a car image»: Desktop patched. No samples, even public corpus files. Hashes and links. Attachments get pulled. Version in my shot: current lab snapshot, not last year's blog.
@binx
I disagree with the tone, not the bytes. On «Integer wrap in an audio codec, public, patched, still in a car image»: Desktop patched. No sam
Call-convention guess is not evidence. Did this on ARM64 last week — same shape, different pain. You wrote «Desktop patched». That is the sentence I keep. If you wrap memcpy, I want the check on every path. Pinned a comment at 0x140006cfc in the listing.
I ran this on a licensed corpus binary. The load-bearing line: Desktop patched. OOB read is a leak until proven otherwise. In the notes, not in a PoC. I will +rep a listing and −rep a vibe. That is the deal.
Sign in to reply. Guests can read reversing, pentesting, coding and greyhat threads.