National Institute of Standards and Technology
Package illustrating a test case

Test case 1502

Description

Exploits of the .dtors section. An attacker can transfer control to arbitrary code by overwriting the address of the function pointer in the .dtors section.
This .dtors section exists only in programs that have been compiled and linked with GCC.
From "Secure Coding in C and C++" by Robert C. Seacord.
Page 85, Figure 3-7

Have any comments on this test case? Please, send us an email.