rendered paste bodyhardened32_2 chroot miranda ~ # gcc -static -fstack-protector-all -fomit-frame-pointer -o ssp_entropy ssp_entropy.c && paxctl -pemsrxv ssp_entropy && gdb --quiet --ex run --ex quit ./ssp_entropy && cat ssp_entropy.c
PaX control v0.4
Copyright 2004,2005,2006 PaX Team <pageexec@freemail.hu>
- PaX flags: -------x-e-- [ssp_entropy]
RANDEXEC is disabled
EMUTRAMP is disabled
Using host libthread_db library "/lib/tls/libthread_db.so.1".
Starting program: /root/ssp_entropy
__guard@@GLIBC mem: [[0x080bcf30]] value: [[0x6f54ffbf]]
__guard canary mem: [[0xff9ebf00]] value: [[0x6f54ffbf]]
Program exited normally.
#include <stdio.h>
void go(void);
void findguard(void);
extern unsigned long int __guard;
int main(void) {
printf("__guard@@GLIBC mem: [[0x%0*x]] value: [[0x%0*x]]\n", 8, &__guard, 8, __guard);
go();
return(0);
}
void go(void) {
findguard();
return;
}
void findguard() {
int loca = 0xdeadbeef;
int *g = &loca; g += 0x1;
printf("__guard canary mem: [[0x%0*x]] value: [[0x%0*x]]\n", 8, g, 8, *g);
return;
}