JonathanSalwan/ROPgadget

ROPGadget found wrong address

Closed this issue · 1 comments

I'm not sure if I'm using the tool wrong or something else. Looking into the address provided by ROPGadget, the memory location actually contains completely different instructions. While the rp++ project gives the correct address->gadget mapping.

For example:
ROPGadget generates:

p += pack("<I", 0x0805d8f0) # xor eax,eax ; ret

While rp++ gives

0x0805d8f0: retn 0x0004 ;  (1 found)

Which matches the actual content in memory.

I can give a vagrant environment that can reproduce this bug if you want.

Please see the new version 5.0.