Max Zinkus

Results 21 comments of Max Zinkus

For RCE exploits, there should probably be pluggable payloads, one of which can be the currently implemented shell loop. This would be ideal for networks with IDS/IPS when shell commands...

I believe this is caused by the negative offset that `size_` uses here https://github.com/stp/stp/blob/c68788eb05731ae08e4f730a6b1c93803620e2b9/lib/extlib-constbv/constantbv.h#L258 Shouldn't BitVector be a struct? and size, bits, and mask be fields? Instead of this negative...

@msoos I'm taking this on. It'll be pretty much a rewrite of constantbv.h and constantbv.cpp, and hopefully not too much outside of those two (perhaps some edits to things that...

@TrevorHansen That sounds preferable. Either way, I need to work out a patch to avoid the segfault which this issue is causing. Somehow there's disconnect in the code where something...

After more digging, it appears that it pops up because the c_interface is handing nulls pointers downward which cause segfaults, due to type/kind confusion between booleans and bitvecs - also...

Understood. I'll take a look at hooking into the existing code which uses [vc_error_hdlr](https://github.com/stp/stp/blob/c68788eb05731ae08e4f730a6b1c93803620e2b9/lib/Globals/Globals.cpp#L47)

I'm not particularly familiar with error handling in C++, so anything would be pretty hacky :/ Thanks for the quick responses. EDIT: after a bit of googling, I might be...

https://github.com/stp/stp/blob/c67821928fecc024212a9f7a248c54b4ad133b67/include/stp/c_interface.h#L998 https://github.com/stp/stp/blob/c67821928fecc024212a9f7a248c54b4ad133b67/bindings/python/stp/stp.py.in#L185 In the C++ code, as well as included in the python binding, is an exception handler registering function. If this could be exposed to the python API (although...

I'm unfortunately a bit stuck with Python2.7 at the moment, but Python3 has `faulthandler` which may replace this need if the binding is run under Python>=3.3: https://docs.python.org/3.7/library/faulthandler.html