The toddler’s introduction to Heap exploitation (Part 1)

In my introductory post I had been talking about dynamic memory allocation and I referenced various solutions that are used to tackle this problem. In this post I am going to focus on the GNU C library’s memory allocation which is based on ptmalloc2 (pthreads malloc) and it is derived from dlmalloc (Doug Lea’s malloc).

The Heap organisation chart

The heap, assigned to each program, is organised according to three major components:

• The arena, which represents a memory area assigned …

exploitation heap-exploitation reverse engineering