Overflow Data

Override Field

Experimental Results

junk data (AAAA)

override chunk header

Canary address is overwritten and addressed abnormally

junk data (AAAA)

override prev_size

Canary addressing is normal

MD5 checksum verification failed

junk data (AAAA)

override prev_size & canary address

Canary address is overwritten and addressed abnormally

create fake chunk and modify chunk size

The chunk header is completely covered

Canary addressing is normal

MD5 checksum verification failed

normal write

no coverage

Canary addressing normal

MD5 checksum is normal