xxxyyy

the results of slicing seems wrong

5

Here is the function I want to slice. And the slicing cmd is `llvm-slicer -sc '68#src_channels' -cutoff-diverging=false -entry convert linear.bc ` the slicing result by line number...

map_free 在虚函数表bpf_map_ops里的偏移是24.struct bpf_queue_stack 结构体里elements的偏移是208，struct bpf_queue_stack的size是256，为了能重写map_free至少应该copy72个byte啊，为什么代码里面是64？还有exp并没有对slub进行defragment，堆喷时，喷射的14个struct bpf_queue_stack和有漏洞的struct bpf_queue_stack结构体根本不相邻。