Skip to content

heap commands do not currently work for stripped glibc versions >= 2.34 #927

@clark-ja

Description

@clark-ja

The issue is that __malloc_hook was removed from the API in glibc version 2.34, which is the symbol which GEF uses as a hack to find the main_arena when the libc is stripped.
While a __malloc_hook symbol is still included in the glibc versions in question, it is just for compatibility reasons and it is not close to the main_arena anymore.

(source: https://sourceware.org/pipermail/libc-alpha/2021-August/129718.html)

Executing any heap command does not currently work for the specified glibc versions as they all rely on the correct identification of the main_arena

Metadata

Metadata

Assignees

No one assigned

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions