257 lines
4.1 KiB
Plaintext
257 lines
4.1 KiB
Plaintext
c
|
|
x 0x7f4854db6b40
|
|
c
|
|
x 0x7f4854db6b40
|
|
x main_arena
|
|
x &main_arena
|
|
x &__malloc_hook
|
|
x main_arena.top
|
|
db main_arena.top
|
|
c
|
|
c
|
|
c
|
|
q
|
|
print __malloc_hook
|
|
print __malloc_hook
|
|
fastbins
|
|
c
|
|
fastbins
|
|
c
|
|
vis_heap_chunks
|
|
c
|
|
fastbins
|
|
r
|
|
c
|
|
fastbins
|
|
print main_arena
|
|
vis_heap
|
|
c
|
|
fastbins
|
|
fastbins
|
|
c
|
|
fastbins
|
|
r
|
|
c
|
|
quit
|
|
db main_arena
|
|
db &main_arena.fastbinsY
|
|
q
|
|
r
|
|
c
|
|
c
|
|
fastbins
|
|
print &main_arena
|
|
print main_arena
|
|
c
|
|
print main_arena
|
|
db main_arena
|
|
db &main_arena
|
|
db &main_arena/100
|
|
db &main_arena 100
|
|
db &main_arena 1000
|
|
q
|
|
db main_arena.bins
|
|
db &main_arena.fastbinsY
|
|
run
|
|
c
|
|
c
|
|
q
|
|
r
|
|
c
|
|
fastbins
|
|
c
|
|
fastbins
|
|
c
|
|
fastbins
|
|
r
|
|
c
|
|
c
|
|
r
|
|
1
|
|
c
|
|
c
|
|
print main_arena
|
|
x __malloc_hook
|
|
x &__malloc_hook
|
|
x 0x7ffff7dd0bc0
|
|
x &main_arena
|
|
q
|
|
print &main_arena
|
|
print main_arena
|
|
db main_arena
|
|
db &main_arena 100
|
|
print main_arena
|
|
print &main_arena
|
|
db &main_arena
|
|
db &main_arena + 1
|
|
db &main_arena+1
|
|
find_fake_fast main_arena.fastbinsY
|
|
find_fake_fast &main_arena.fastbinsY
|
|
x &main_arena.fastbinsY
|
|
db main_arena
|
|
db &main_arena
|
|
db &main_arena+1
|
|
db &main_arena+0
|
|
dq &main_arena+0
|
|
dq &main_arena+1
|
|
x/x 00007fc130a1cb60
|
|
x/x 0x00007fc130a1cb60
|
|
x/x 0x7fc130a1cb69
|
|
x main_arena
|
|
x &main_arena
|
|
x 0x0x7fc130a1cb68
|
|
x 0x7fc130a1cb68
|
|
x 0x7fc130a1cb68+1
|
|
x/10x 0x7fc130a1cb68+1
|
|
x/10x 0x7fc130a1cb68+0
|
|
x/10x 0x7fc130a1cb68+1
|
|
x/10x 0x7fc130a1cb69
|
|
db 0x7fc130a1cb69
|
|
db 0x7fc130a1cb71
|
|
db 0x7fc130a1cb70
|
|
x main_arena
|
|
print &main_arena
|
|
db &main_arena+1
|
|
dq &main_arena+1
|
|
q
|
|
x 0x7f7151e3cb70
|
|
db 0x7f7151e3cb70
|
|
db main_arena
|
|
db &main_arena
|
|
print main_arena
|
|
x main_arena
|
|
print &main_arena
|
|
db 0x7f7151e3cb69
|
|
db 0x7f7151e3cb68
|
|
db 0x7f7151e3cb67
|
|
db 0x7f7151e3cb68
|
|
db 0x7f7151e3cb69
|
|
dq 0x7f7151e3cb69
|
|
db 0x7f7151e3cb69
|
|
db 0x7f7151e3cb67
|
|
db 0x7f7151e3cb69
|
|
db 0x7f7151e3cb68
|
|
find_fake_fast main_arena
|
|
find_fake_fast &main_arena
|
|
db 0x7f7151e3cb68
|
|
db 0x7f7151e3cb69
|
|
db 0x7f7151e3cb67
|
|
db 0x7f7151e3cb68
|
|
db 0x7f7151e3cb70
|
|
db 0x7fc130a1cb69
|
|
db 0x7f7151e3cb70
|
|
db 0x7f7151e3cb69
|
|
find_fake_fast &__free_hook
|
|
find_fake_fast &__realloc_hook
|
|
find_fake_fast &__memalign_hook
|
|
find_fake_fast &__malloc_initialize_hook
|
|
find_fake_fast &__after_morecore_hook
|
|
find_fake_fast q
|
|
q
|
|
quit
|
|
q
|
|
fastbins
|
|
c
|
|
frame 4
|
|
context code
|
|
x 0x7fd533e9cb68
|
|
db 0x7fd533e9cb68
|
|
x fastbins
|
|
print main_heap
|
|
print &main_heap
|
|
print &main_arena
|
|
print main_arena
|
|
db 0x7fee89f0ee10
|
|
db 0x7fee89f0ee10 10
|
|
db 0x7fee89f0ee10 48
|
|
db 0x7fee89f0ee10-3 48
|
|
db 0x7fee89f0ee10-3 (16*4)
|
|
db 0x7fee89f0ee10
|
|
db 0x7fee89f0ee10 - 1
|
|
db 0x7fee89f0ee10-1
|
|
db 0x7fee89f0ee10-1 1
|
|
db 0x7fee89f0ee10-1 32
|
|
db 0x7fee89f0ee10-1 (48)
|
|
db 0x7fee89f0ee10-1 (48 * 3)
|
|
db 0x7fee89f0ee10-1 (48*3)
|
|
db 0x7fee89f0ee10-1
|
|
db 0x7fee89f0ee10
|
|
q
|
|
print main_arena
|
|
x 0x7fdb92f8ee10
|
|
c
|
|
find_fake_fast &malloc_hook
|
|
find_fake_fast &__malloc_hook
|
|
x __malloc_hook
|
|
x &__malloc_hook
|
|
x &__malloc_hook
|
|
x &__malloc_hook - 16
|
|
x &__malloc_hook
|
|
db &__malloc_hook-100
|
|
db &__malloc_hook-100 100
|
|
db &__malloc_hook-1
|
|
db &__malloc_hook
|
|
db &__malloc_hook-48 48
|
|
db &__malloc_hook-48 48 * 8
|
|
db &__malloc_hook-48 48*8
|
|
db &__malloc_hook-48*8 48
|
|
db &__malloc_hook-80*8 80
|
|
db &__malloc_hook-160*8 80
|
|
db &__malloc_hook-160 80
|
|
db -h
|
|
db &__malloc_hook
|
|
x __malloc_hook
|
|
x &__malloc_hook
|
|
x __malloc_hook-100
|
|
x &__malloc_hook-100
|
|
x &__malloc_hook-100 100
|
|
x &__malloc_hook-100 100
|
|
db &__malloc_hook-100 100
|
|
db &__malloc_hook-100 100*8
|
|
print (void*)&malloc_hook
|
|
print (void*)&__malloc_hook
|
|
db &__malloc_hook-100 101*8
|
|
db &__malloc_hook-100 101*8
|
|
db &__malloc_hook-100 100*8
|
|
db &__malloc_hook-100
|
|
db &__malloc_hook-(16*9)
|
|
db &__malloc_hook-(16*9) 16*9
|
|
db &__malloc_hook-(10) (10*16)
|
|
db &__malloc_hook-(10) (10*8)
|
|
db &__malloc_hook-(1) (10*8)
|
|
db &__malloc_hook-(11
|
|
db &__malloc_hook
|
|
db &__malloc_hook-1
|
|
db &__malloc_hook-8
|
|
db &__malloc_hook
|
|
db &__malloc_hook-32
|
|
db &__malloc_hook-(32/8)
|
|
db &__malloc_hook-(32/8) 1
|
|
db &__malloc_hook-(32/8) 10
|
|
db 0x7f5575614b2a 1
|
|
db 0x7f5575614b2a
|
|
db 0x7f5575614b20
|
|
db &__malloc_loc
|
|
db &__malloc_hook-(16) (16*8)
|
|
print (void*)__malloc_hook
|
|
print (void*)&__malloc_hook
|
|
db 0x7f5575614b36
|
|
0x7f5575614b2a
|
|
find_fake_fast
|
|
find_fake_fast &__malloc_hook
|
|
print (void*)&__malloc_hook
|
|
exit
|
|
quit
|
|
print main_arena
|
|
x 0x7f265fd4cb2d
|
|
x 0x7f265fd4cb2d
|
|
db 0x7f265fd4cb2d
|
|
print (void*)&__malloc_hook
|
|
find_fake_fast &__malloc_hook
|
|
db 0x7f265fd4cb2d
|
|
db 0x7f265fd4cb2d - 1
|
|
db 0x7f265fd4cb2d-1
|
|
db
|
|
c
|
|
db &__malloc_hook-(16) (16*8)
|