ROP vs ret2libc: Classifying `ret` Sites on a Toy Binary

Mental model plus objdump of a toy: ret2libc is whole-function reuse, ROP is fragment reuse. Classify epilogue rets vs pop;ret vs leave;ret. Overflow crash with RIP=0x4141… — no system("/bin/sh") chain.

February 9, 2021 · 8 min · 1695 words · Jose Adalberto Gutierrez Ochoa