Bug #2459

Msf::Util:EXE.to_win32pe fails with Metasm parse error

Added by Joshua J. Drake over 1 year ago. Updated 4 months ago.

Status:Closed Start date:08/26/2010
Priority:Normal Due date:
Assignee:Joshua J. Drake % Done:

100%
Category:payloads
Target version:Metasploit 3.5.0
Resolution:fixed Release Note:

Description

The error was:

[-] Exploit exception: immediate overflow :i8 -87h "\"<unk>\"" line 300

Altho it appears to be difficult to reproduce. I suspect some fuzzing will turn it up easily though.

to_win32pe_test.rb - test script (1.4 kB) Joshua J. Drake, 09/19/2010 08:28 pm

to_win32pe_asm_save.diff - exe.rb diff (770 Bytes) Joshua J. Drake, 09/19/2010 08:28 pm

Associated revisions

Revision 3c505f4c
Added by Joshua Drake over 1 year ago

remove loop instruction, it was causing problems when the destination was too far away, fixes #2459

git-svn-id: file:///home/svn/framework3/trunk@10385 4d416f70-5f16-0410-b530-b9f4589650da

History

#1
Updated by Joshua J. Drake over 1 year ago

HD committed r10164 in response to this bug. We will need more testing to know if it fixes it since it seems rare that the error occurs in the first place.

#2
Updated by Joshua J. Drake over 1 year ago

  • Status changed from New to Resolved
  • % Done changed from 0 to 100

Applied in changeset r10385.

#3
Updated by Joshua J. Drake over 1 year ago

Attaching the script and the diff I used for testing.. not sure if the diff will apply anymore, but it's at least useful to know what I changed :)

#4
Updated by Jonathan Cran over 1 year ago

  • Status changed from Resolved to Closed

Also available in: Atom PDF