Saleem Rashid

Results 11 comments of Saleem Rashid

The offsets on Ubuntu 18.04 (Sudo 1.8.25p1) and 20.04 (Sudo 1.8.29) are the same, but this PoC will not work unmodified because Sudo introduced special EOF handling. The EOF character,...

You can take a look at the workaround I used in [my exploit](https://github.com/saleemrashid/sudo-cve-2019-18634/blob/master/exploit.c), but it unfortunately won't be applicable to your exploit. Though I do know another simple trick that...

> I mean, the implementation of buffer is pretty straightforward; the code is long mostly due to comments and tracing. I'm not _against_ including something like this, but it's also...

This ties into the error handling/API design section of my proposal in #450

Executing `git submodule update --init --recursive` should resolve the first issue (it will download the libsnark submodule) I believe the latter issue is caused by this compiler bugfix (https://github.com/rust-lang/rust/pull/37378) and...

You need the development headers for GMP. I'm not a macOS user so take this advice with a _metric ton_ of salt, but something to the effect of `brew install...

@rex4539 To be fair, I imagine most (if not all) of the developers of the MPC software use Linux.

@roosemberth Thanks. This is the toolchain linked from their front page (not any of the ones in `deploy/sdk`) and is the exact same URL as the one in this repository....

This is fairly comprehensive documentation on the hyperlink feature that @alex mentioned: https://gist.github.com/egmontkob/eb114294efbcd5adb1944c9f3cb5feda

This isn't an issue with the exploit itself, but rather how it's been linked. In order to help, I'd need information about the system you compiled it on and the...