You’re unable to view this Post because this account owner limits who can view their Posts.
@grsecurity @stevecheckoway printf according to spec is Turing complete/a fun exercise. For CF bending use memcpy-like dispatchers
2
@gannimo @grsecurity @stevecheckoway so you admit that printf itself according to real life deployments is NOT exploitable at all?
1
@paxteam @grsecurity @stevecheckoway No, that's not what I said. For real life exploitation you usually don't want a TC interpreter ;)
1
Replying to @gannimo
@gannimo @grsecurity @stevecheckoway you said it was TC complete according to spec and since real life printf isn't... logic 101.

Jan 10, 2016 · 3:15 PM UTC

1
@gannimo @grsecurity @stevecheckoway also so far you failed to prove that real life printf is TC. so either retract or provide proof.