It's far from complete

Posted Feb 25, 2008 9:02 UTC (Mon) by fbh (guest, #49754)
In reply to: It's far from complete by cras
Parent article: vmsplice(): the making of a local root exploit

Acutally you're right.

It's a trick to compute the addresses of the fake "struct page" structures on both 32 and 64
bits platforms.

It should work on 64 bits platforms. I don't know why it doesn't in your case though but it's
just a matter of tuning some values in the exploit code probably.

Thanks.