Hacker News new | ask | show | jobs
by zython 3187 days ago
I dont understand how a potential exploit would work.

>he loader could allow part of that application's data segment to map over the memory area reserved for its stack, potentially resulting in memory corruption

do they expect an attacker to redirect code execution to an address on the stack which they previously wrote when loading the binary, so they can make use of suid to escalate priveliges ?