Improve stack description & intro

This commit is contained in:
Ward Wouts 2020-01-16 15:05:49 +01:00
parent 55dd6701c6
commit f82b2dd147
3 changed files with 23 additions and 2 deletions

1
Stack.drawio Normal file
View file

@ -0,0 +1 @@
<mxfile host="www.draw.io" modified="2020-01-16T13:46:55.828Z" agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" etag="6qlUlQFycMoPG3NIIhzy" version="12.5.5" type="device"><diagram id="g4E6CRwNMIp2lMGSehA3" name="Page-1">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</diagram></mxfile>

BIN
Stack.png Normal file

Binary file not shown.

After

Width:  |  Height:  |  Size: 12 KiB

View file

@ -148,9 +148,13 @@ layout: false
## Introduction ## Introduction
] ]
.right-column[ .right-column[
- C is full of holes, let's get to know one. C is full of holes, let's get to know one.
- Old skool, so no OS or hardware protections. Old skool, so no OS or hardware protections. Which today is mostly relevant in IoT. (Remember, the `S` in `IoT` stands for Security.)
Stack smashing is making use of a buffer overflow vulnerability in code using variables on the stack. This type of vulenrability has been known for a long time. This attack was first properly documented in Phrack #49.
.footnote[Phrack #49(http://www.phrack.org/issues/49/14.html#article)]
] ]
--- ---
template: inverse template: inverse
@ -171,6 +175,22 @@ For x86 systems the stack grows from the largest memory address up.
.footnote[Borrowed from [wikipedia](https://en.wikipedia.org/wiki/Stack-based_memory_allocation)] .footnote[Borrowed from [wikipedia](https://en.wikipedia.org/wiki/Stack-based_memory_allocation)]
] ]
--- ---
.left-column[
## Say wut?
]
.right-column[
Whenever a function is called a frame is added to the stack. Whenever a function ends the frame is deleted.
Such a frame consists of variables, a stored stack pointer and a return address.
]
---
.left-column[
## This is not helping you know...
]
.right-column.center.middle[
<img src="Stack.png" width="100%" />
]
---
template: inverse template: inverse
# How does this work? # How does this work?
--- ---