RIP covered it:
To send a bunch to cover the return address
And then send the return address of the function shell
How much coverage:
0x8 - (-0xF) = 0x17
func address
pwn
Guess you like
Origin www.cnblogs.com/zhibin123/p/11605293.html
Ranking