Skip to content
This repository was archived by the owner on Oct 24, 2021. It is now read-only.

Commit b39a46f

Browse files
committed
line numbers don't work apparently
1 parent 3a7fae5 commit b39a46f

File tree

1 file changed

+3
-3
lines changed

1 file changed

+3
-3
lines changed

2020-InCTF/README.md

+3-3
Original file line numberDiff line numberDiff line change
@@ -67,7 +67,7 @@ Recall that there is a cache person pointer that is set on view. How does this p
6767

6868
Here is relevant Ghidra decomp for deleting a person from a house:
6969

70-
```c=
70+
```c
7171
void remove_person_from_house(void){
7272
uint house_num;
7373
uint person_num;
@@ -165,7 +165,7 @@ So, we can get a 1->2->1 double free.
165165
Unfortunately, we can't directly free `person_chunk` twice in any case, as `person_chunk` gets set to not in use and the `person_chunk` pointer gets zeroed after deleting.
166166
167167
Luckily, we can use the party function. Here is relevant code:
168-
```c=
168+
```c
169169
if (uVar1 == 0) {
170170
local_14 = 0;
171171
while (local_14 < 10) {
@@ -225,7 +225,7 @@ Then, we can go and delete something with `/bin/sh` in it. Recall that we chose
225225

226226
Script:
227227

228-
```python=
228+
```python
229229
from pwn import *
230230

231231
e = ELF("./chall")

0 commit comments

Comments
 (0)