force aligned fake_chunk in tcache_house_of_spirit.c

Author: Kyle-Kyle

glibc_2.27/tcache_house_of_spirit.c

@@ -19,7 +19,7 @@ int main()
 
 	printf("Let's imagine we will overwrite 1 pointer to point to a fake chunk region.\n");
 	unsigned long long *a; //pointer that will be overwritten
-	unsigned long long fake_chunks[10]; //fake chunk region
+	unsigned long long fake_chunks[10] __attribute__((aligned(0x10))); //fake chunk region
 
 	printf("This region contains one fake chunk. It's size field is placed at %p\n", &fake_chunks[1]);
 

glibc_2.31/tcache_house_of_spirit.c

@@ -19,7 +19,7 @@ int main()
 
 	printf("Let's imagine we will overwrite 1 pointer to point to a fake chunk region.\n");
 	unsigned long long *a; //pointer that will be overwritten
-	unsigned long long fake_chunks[10]; //fake chunk region
+	unsigned long long fake_chunks[10] __attribute__((aligned(0x10))); //fake chunk region
 
 	printf("This region contains one fake chunk. It's size field is placed at %p\n", &fake_chunks[1]);
 

glibc_2.32/tcache_house_of_spirit.c

@@ -19,7 +19,7 @@ int main()
 
 	printf("Let's imagine we will overwrite 1 pointer to point to a fake chunk region.\n");
 	unsigned long long *a; //pointer that will be overwritten
-	unsigned long long fake_chunks[10]; //fake chunk region
+	unsigned long long fake_chunks[10] __attribute__((aligned(0x10))); //fake chunk region
 
 	printf("This region contains one fake chunk. It's size field is placed at %p\n", &fake_chunks[1]);
 

glibc_2.33/tcache_house_of_spirit.c

@@ -19,7 +19,7 @@ int main()
 
 	printf("Let's imagine we will overwrite 1 pointer to point to a fake chunk region.\n");
 	unsigned long long *a; //pointer that will be overwritten
-	unsigned long long fake_chunks[10]; //fake chunk region
+	unsigned long long fake_chunks[10] __attribute__((aligned(0x10))); //fake chunk region
 
 	printf("This region contains one fake chunk. It's size field is placed at %p\n", &fake_chunks[1]);
 

glibc_2.34/tcache_house_of_spirit.c

@@ -19,7 +19,7 @@ int main()
 
 	printf("Let's imagine we will overwrite 1 pointer to point to a fake chunk region.\n");
 	unsigned long long *a; //pointer that will be overwritten
-	unsigned long long fake_chunks[10]; //fake chunk region
+	unsigned long long fake_chunks[10] __attribute__((aligned(0x10))); //fake chunk region
 
 	printf("This region contains one fake chunk. It's size field is placed at %p\n", &fake_chunks[1]);
 

glibc_2.35/tcache_house_of_spirit.c

@@ -19,7 +19,7 @@ int main()
 
 	printf("Let's imagine we will overwrite 1 pointer to point to a fake chunk region.\n");
 	unsigned long long *a; //pointer that will be overwritten
-	unsigned long long fake_chunks[10]; //fake chunk region
+	unsigned long long fake_chunks[10] __attribute__((aligned(0x10))); //fake chunk region
 
 	printf("This region contains one fake chunk. It's size field is placed at %p\n", &fake_chunks[1]);
 

glibc_2.36/tcache_house_of_spirit.c

@@ -19,7 +19,7 @@ int main()
 
 	printf("Let's imagine we will overwrite 1 pointer to point to a fake chunk region.\n");
 	unsigned long long *a; //pointer that will be overwritten
-	unsigned long long fake_chunks[10]; //fake chunk region
+	unsigned long long fake_chunks[10] __attribute__((aligned(0x10))); //fake chunk region
 
 	printf("This region contains one fake chunk. It's size field is placed at %p\n", &fake_chunks[1]);
 

glibc_2.37/tcache_house_of_spirit.c

@@ -19,7 +19,7 @@ int main()
 
 	printf("Let's imagine we will overwrite 1 pointer to point to a fake chunk region.\n");
 	unsigned long long *a; //pointer that will be overwritten
-	unsigned long long fake_chunks[10]; //fake chunk region
+	unsigned long long fake_chunks[10] __attribute__((aligned(0x10))); //fake chunk region
 
 	printf("This region contains one fake chunk. It's size field is placed at %p\n", &fake_chunks[1]);
 

glibc_2.38/tcache_house_of_spirit.c

@@ -19,7 +19,7 @@ int main()
 
 	printf("Let's imagine we will overwrite 1 pointer to point to a fake chunk region.\n");
 	unsigned long long *a; //pointer that will be overwritten
-	unsigned long long fake_chunks[10]; //fake chunk region
+	unsigned long long fake_chunks[10] __attribute__((aligned(0x10))); //fake chunk region
 
 	printf("This region contains one fake chunk. It's size field is placed at %p\n", &fake_chunks[1]);
 

glibc_2.39/tcache_house_of_spirit.c

@@ -19,7 +19,7 @@ int main()
 
 	printf("Let's imagine we will overwrite 1 pointer to point to a fake chunk region.\n");
 	unsigned long long *a; //pointer that will be overwritten
-	unsigned long long fake_chunks[10]; //fake chunk region
+	unsigned long long fake_chunks[10] __attribute__((aligned(0x10))); //fake chunk region
 
 	printf("This region contains one fake chunk. It's size field is placed at %p\n", &fake_chunks[1]);