philwantsfish/gdb_commands

GDB commands to aid exploit development

gdb_commands's Issues

Fix parsing of shared libraries

GDB indicates an SO is missing debugging information with an asterisk in its info sharedlibrary output (at least on 7.9):

(gdb) info sharedlibrary
From        To          Syms Read   Shared Object Library
0xb7fdd5f2  0xb7ff6d5e  Yes (*)     /lib/ld-linux.so.2
(*): Shared library is missing debugging information.

gdb-checksec.py doesn't parse this correctly because of an alphanumeric token (\w) in its regex:

mobjs = re.findall("(0x[a-zA-Z0-9]+)\s+(0x[a-zA-Z0-9]+)\s+(\w+)(\s+\w+)?\s+([^\s]+)", sharedlibrary_output)

Improve "NX" detection

It's not sufficient to test for the existence of a GNU_STACK program header. If it exists, it must also be checked for an executable flag.

ELFs should be classified into two groups:

• NX=no: missing GNU_STACK header or GNU_STACK header with 'E' flag
• NX=yes: GNU_STACK header without 'E' flag.