Title: Reliable Windows Heap Exploits Author: Ohorovitz Last modified by: blah Created Date: 3/25/2004 6:59:27 AM Document presentation format: On-screen Show
If size = 512K, virtual memory is used (not on heap) If 1K, ... Requested size is 1K (to fit the table) ... We must be the first one to allocate that size ...
... still can't find any free entry, extend heap as ... If the chunk 1K and the lookaside is full, put it on the free list ... Heap header cookie calculation ...