@Patricia @cupantaeconf

In 2010 Format String vuln relies on many features of printf

@Patricia @cupantaeconf

And in 2021
#CupanTaeConf

@Patricia @cupantaeconf

in 2002 we talked about buffer overflow and in 2017 ...

@Patricia @cupantaeconf

omg and oldie but a good one

@Patricia @cupantaeconf

How to find it ?

@Patricia @cupantaeconf

We can see the pattern of the vulnerability explained before

@Patricia @cupantaeconf

ooof! root exploit

#CupanTaeConf #

@Patricia @cupantaeconf

in 2019 Bad Binder vulnerability.!
Binder is Android's IPC mechanism

@Patricia @cupantaeconf

... she showed us some code on how to fix the vuln and how to find them.

Some tools exist, like ASan but they replace malloc, so tricky

@Patricia @cupantaeconf

Showing when the Unlink happens... the shape of the vulnerability

@Patricia @cupantaeconf

@Patricia @cupantaeconf

Going over doubly-linked lists as the z_malloc is an implementation of malloc that has some extra metadata which uses a doubly linked list, and the vulnerability relies on this structure

@Patricia @cupantaeconf

We keep seeing the same pattern of something similar to what today call Unlink Vulnerability

#CupanTaeConf #patriciaRocks!

We are live now if you want to join us https://cupantaeconf.com/classic-vulnerabilities-by-patricia-aas/
@Patricia @cupantaeconf

I won't be there on the night because I'll be co-hosting @codinggrace's newest virtual talks called @cupantaeconf.

Our final speaker of our first series is Patricia Aas talking about "Classic Vulnerabilities".

You can still get tickets (€5) and join us virtually:
https://cupantaeconf.com/classic-vulnerabilities-by-patricia-aas/