Wednesday, May 31, 2023

C++ Std::Condition_Variable Null Pointer Derreference


This story is about a bug generated by g++ and clang compilers (at least)
The condition_variables is a feature on the standard library of c++ (libstdc++), when its compiled statically a weird asm code is generated.


Any example on the link below will crash if its compiled statically:
 https://en.cppreference.com/w/cpp/thread/condition_variable



In this case the condition_variable.wait() crashed, but this happens with other methods, a simple way to trigger it:




If this program is compiled dynamically the crash doesn't occur:

Looking the dissasembly there is a surprise created by the compiler:


Compilers:
    g++  9.2.1+20200130-2
    clang++ v9

Both compilers are generating the "call 0x00"

If we check this call in a dynamic compiled:




The implementation of condition_variable in github:
https://github.com/gcc-mirror/gcc/blob/b7c9bd36eaacac42631b882dc67a6f0db94de21c/libstdc%2B%2B-v3/include/std/condition_variable


The compilers can't copile well this code in static,  and same happens on  other condition_variable methods.
I would say the _lock is being assembled improperly in static, is not exacly a null pointer derreference but the effects are the same, executing code at address 0x00 which on linux is a crash on most of cases.

Related news
  1. Growth Hacker Tools
  2. Hack Tools For Pc
  3. Pentest Tools Framework
  4. Pentest Tools Free
  5. Tools 4 Hack
  6. Hacking App
  7. Hacker Tool Kit
  8. Hacking App
  9. Hack Tools
  10. Tools Used For Hacking
  11. Wifi Hacker Tools For Windows
  12. Easy Hack Tools
  13. Hack Apps
  14. Pentest Tools For Mac
  15. Best Hacking Tools 2019
  16. Black Hat Hacker Tools
  17. Pentest Tools Website
  18. Tools 4 Hack
  19. Hack Tool Apk
  20. Hacker Tools For Ios
  21. Hack Tools For Ubuntu
  22. Hacker Techniques Tools And Incident Handling
  23. Pentest Tools Github
  24. Tools 4 Hack
  25. Hacking Tools Hardware
  26. Pentest Tools Windows
  27. Hacker Tools Free Download
  28. Growth Hacker Tools
  29. Hacker Security Tools
  30. Hackers Toolbox
  31. Pentest Tools Find Subdomains
  32. Hacker Hardware Tools
  33. Pentest Recon Tools
  34. Hacking Tools Github
  35. Tools Used For Hacking
  36. Pentest Tools Kali Linux
  37. Hacker Tools Online
  38. Top Pentest Tools
  39. Nsa Hack Tools Download
  40. Tools For Hacker
  41. Pentest Tools Find Subdomains
  42. Hacker Security Tools
  43. Hacking Tools Online
  44. Game Hacking
  45. Hacking Tools Pc
  46. Hacker Security Tools
  47. Pentest Tools Review
  48. Tools 4 Hack
  49. Tools Used For Hacking
  50. Hacking Tools Windows 10
  51. Pentest Tools For Mac
  52. Nsa Hack Tools
  53. Game Hacking
  54. Hacker Tools
  55. Hack Apps
  56. Hacking Tools And Software
  57. Pentest Tools For Android
  58. Pentest Tools Linux
  59. Hack Website Online Tool
  60. Computer Hacker
  61. Hacker Tools For Ios
  62. Hacking Tools Usb
  63. Hacker Tools Online
  64. Hacker Tools List
  65. Hack App
  66. Hacker Hardware Tools
  67. Top Pentest Tools
  68. Hacking Tools For Beginners
  69. Pentest Tools For Windows
  70. Pentest Tools Windows
  71. Beginner Hacker Tools
  72. Hacker Tools Windows
  73. Pentest Box Tools Download
  74. Hacker Tools Github
  75. Hacker Tools For Ios
  76. Android Hack Tools Github
  77. Pentest Tools List
  78. How To Make Hacking Tools
  79. Hacker Tools Hardware
  80. Hacking Tools Hardware
  81. Pentest Tools Free
  82. Hacker Tools List
  83. Hacker Tools Hardware
  84. Hack Apps
  85. Hack Apps
  86. World No 1 Hacker Software
  87. New Hacker Tools
  88. Hacker
  89. Hacking Tools Online
  90. How To Install Pentest Tools In Ubuntu
  91. Hack And Tools
  92. Pentest Tools
  93. Hacker
  94. Pentest Tools Tcp Port Scanner
  95. Black Hat Hacker Tools
  96. Hacking Tools For Mac
  97. Black Hat Hacker Tools
  98. Hacker Tools Mac
  99. Pentest Tools Find Subdomains
  100. Hack Tools
  101. Physical Pentest Tools
  102. Pentest Tools For Mac
  103. Pentest Tools Windows
  104. Hacker Techniques Tools And Incident Handling
  105. Hack Tools For Pc
  106. Pentest Tools Windows
  107. Best Pentesting Tools 2018
  108. How To Install Pentest Tools In Ubuntu
  109. Hack Tools Github
  110. Pentest Tools Website Vulnerability
  111. Hacking Tools For Windows
  112. Pentest Tools Online
  113. Pentest Tools Framework
  114. Tools 4 Hack
  115. What Is Hacking Tools
  116. Hack Tool Apk
  117. Hack Tools Pc
  118. Pentest Tools Apk
  119. Pentest Tools Free
  120. Pentest Tools Linux
  121. Hacking Tools Software
  122. Hacker Tools List
  123. Pentest Tools Github
  124. Hacking App
  125. Pentest Tools Alternative
  126. Hacks And Tools
  127. Hack Tools For Mac
  128. Hacking Tools For Kali Linux
  129. Hackers Toolbox
  130. Hacking Apps
  131. Pentest Tools Tcp Port Scanner
  132. Hacking Tools Software
  133. Hacking Tools For Windows
  134. Pentest Tools Framework
  135. Hacking Tools For Pc
  136. Bluetooth Hacking Tools Kali
  137. Easy Hack Tools
  138. Pentest Tools
  139. Tools Used For Hacking
  140. Pentest Reporting Tools
  141. Hack Tools 2019
  142. Hacker Tools Mac
  143. Hacking Tools 2020
  144. Hacking Tools For Mac
  145. Hacker Tools For Ios
  146. Pentest Tools Port Scanner
  147. Wifi Hacker Tools For Windows
  148. Hacker Tools Mac
  149. Pentest Tools Website
  150. Hack Tools
  151. Termux Hacking Tools 2019
  152. Pentest Tools Open Source
  153. Hacker Search Tools
  154. Termux Hacking Tools 2019
  155. Pentest Tools Free
  156. Pentest Tools Find Subdomains
  157. Hacker Tools Free Download
  158. Top Pentest Tools
  159. Hacking Tools
  160. Hacking Tools Download
  161. Hacker Tools Mac
  162. Hacker Tools For Mac
  163. How To Hack
  164. Pentest Tools Windows
  165. Hacker Tools Software
  166. What Are Hacking Tools
  167. Hacking Tools For Games
  168. Pentest Tools Alternative
  169. Hacking Tools Online
  170. Hacks And Tools
  171. Hacking Tools For Kali Linux
  172. Hack Apps

No comments: