May 30, 2023

C++ Std::Condition_Variable Null Pointer Derreference


This story is about a bug generated by g++ and clang compilers (at least)
The condition_variables is a feature on the standard library of c++ (libstdc++), when its compiled statically a weird asm code is generated.


Any example on the link below will crash if its compiled statically:
 https://en.cppreference.com/w/cpp/thread/condition_variable



In this case the condition_variable.wait() crashed, but this happens with other methods, a simple way to trigger it:




If this program is compiled dynamically the crash doesn't occur:

Looking the dissasembly there is a surprise created by the compiler:


Compilers:
    g++  9.2.1+20200130-2
    clang++ v9

Both compilers are generating the "call 0x00"

If we check this call in a dynamic compiled:




The implementation of condition_variable in github:
https://github.com/gcc-mirror/gcc/blob/b7c9bd36eaacac42631b882dc67a6f0db94de21c/libstdc%2B%2B-v3/include/std/condition_variable


The compilers can't copile well this code in static,  and same happens on  other condition_variable methods.
I would say the _lock is being assembled improperly in static, is not exacly a null pointer derreference but the effects are the same, executing code at address 0x00 which on linux is a crash on most of cases.

Related posts
  1. Github Hacking Tools
  2. Nsa Hacker Tools
  3. Hacking Tools For Windows Free Download
  4. Pentest Tools For Mac
  5. Pentest Tools Android
  6. Pentest Tools Open Source
  7. Best Hacking Tools 2019
  8. Pentest Tools Online
  9. Black Hat Hacker Tools
  10. Pentest Tools Review
  11. Hacking Tools Download
  12. Hacker Tools Software
  13. Pentest Tools Android
  14. Hacker Tools Mac
  15. Pentest Tools For Windows
  16. Hacking App
  17. Hack Tools Mac
  18. Pentest Tools Apk
  19. Ethical Hacker Tools
  20. What Are Hacking Tools
  21. Hacker Security Tools
  22. Free Pentest Tools For Windows
  23. Hacker Tools 2019
  24. Nsa Hack Tools Download
  25. Pentest Tools Subdomain
  26. Best Hacking Tools 2019
  27. Hacker Tools Hardware
  28. Hacker Tools For Ios
  29. Hacker Tools Apk Download
  30. Pentest Tools Free
  31. Hacking Tools Usb
  32. Top Pentest Tools
  33. Hack App
  34. Hacker Tools 2020
  35. Hack Tool Apk
  36. Pentest Tools Nmap
  37. Hacking Tools Name
  38. Hack Tools 2019
  39. Nsa Hack Tools
  40. Hacker Tool Kit
  41. Game Hacking
  42. Pentest Tools Apk
  43. Pentest Tools For Ubuntu
  44. Black Hat Hacker Tools
  45. Hacking Tools Software
  46. Pentest Tools Website Vulnerability
  47. Hack Tools
  48. Hacker Tools For Mac
  49. Pentest Tools Find Subdomains
  50. Hack Tools
  51. Hacker Tools Github
  52. Hacker Tools Apk
  53. Hacker Tools Apk Download

No comments:

Post a Comment