Skip to content

Commit

Permalink
Update db_enums documentation again
Browse files Browse the repository at this point in the history
  • Loading branch information
AndrewFasano committed Jun 12, 2019
1 parent 6adfab5 commit c55bf18
Showing 1 changed file with 9 additions and 9 deletions.
18 changes: 9 additions & 9 deletions docs/db_enums.md
Original file line number Diff line number Diff line change
Expand Up @@ -3,15 +3,15 @@ They are defined in two places, lava.py and lava.hxx.

attackpoint types:

0: `FUNCTION_ARG` (an arg to a fn)
1: `POINTER_READ` (read via ptr)
2: `POINTER_WRITE` (write via ptr)
3: `QUERY_POINT` (is this the sentinels ricky puts in after every stmt?)
4: `PRINTF_LEAK` (really just a printf)
0. `FUNCTION_ARG` (an arg to a fn)
1. `POINTER_READ` (read via ptr)
2. `POINTER_WRITE` (write via ptr)
3. `QUERY_POINT` (is this the sentinels ricky puts in after every stmt?)
4. `PRINTF_LEAK` (really just a printf)

bug types:

0: `PTR_ADD` (corrupt a pointer at attack point)
1: `RET_BUFFER` (stack pivot)
2: `REL_WRITE` (This was a is a write-what-where but is now a misnomer for a 3-dua variation on a `PTR_ADD` bug)
3: `PRINTF_LEAK` (turn printf into a stack / heap leak)
0. `PTR_ADD` (corrupt a pointer at attack point)
1. `RET_BUFFER` (stack pivot)
2. `REL_WRITE` (This was a is a write-what-where but is now a misnomer for a 3-dua variation on a `PTR_ADD` bug)
3. `PRINTF_LEAK` (turn printf into a stack / heap leak)

0 comments on commit c55bf18

Please sign in to comment.