Skip to content

unlinking.md

Latest commit

 

History

History
12 lines (7 loc) · 752 Bytes

unlinking.md

File metadata and controls

12 lines (7 loc) · 752 Bytes

unlinking from HeapLab By Max

  • Victims FD is followed and victims BK is copied to destination BK.
  • Victims BK is followed and victims FD is copied to destination FD.

Note : When copying FD or BK they think the target is a chunk so the pasting of either of two happens at +24 bytes afterwards the location pointed by FD because in general chunk's BK is at 24 bytes far from the start.

Safe Unlinking Failures

  1. fd-> bk != p ## On following the victims fd the corresponding chunk's bk does not point back to our victim.
  2. bk-> fd != p ## On following the victims bk the corresponding chunk's fd does not point back to our victim.