ROPGadget found wrong address
Closed this issue · 1 comments
yegle commented
I'm not sure if I'm using the tool wrong or something else. Looking into the address provided by ROPGadget
, the memory location actually contains completely different instructions. While the rp++
project gives the correct address->gadget mapping.
For example:
ROPGadget
generates:
p += pack("<I", 0x0805d8f0) # xor eax,eax ; ret
While rp++
gives
0x0805d8f0: retn 0x0004 ; (1 found)
Which matches the actual content in memory.
I can give a vagrant
environment that can reproduce this bug if you want.
JonathanSalwan commented
Please see the new version 5.0.