CodeJitsu targetted CSDS running CROMU_00073 in round 23.

---

Type 1 POV

eip:0xe86664e8 - edi:0xc462ce44

---

The application exited with a segmentation fault

Tracing data from eip: 0x805032c tracing source of memory: 0xbaaaaa04 (value: 0xe86664e8)

0x805027d : receive syscall (return)
0x80483a3 : mov dl,byte ptr [ecx+eax]
0x80483ad : mov byte ptr [ecx+eax],dl
0x8050313 : mov ecx,dword ptr [edx]
0x8050329 : mov dword ptr [esp],ecx
0x805032c: ret // address: 0xbaaaaa04 value: 0xe86664e8

---

Execution control corruption via return (return to: 0xbaaaaef8).

Tracing data from eip: 0x80482c6 tracing source of memory: 0xbaaaaef8 (value: 0x8050313)

0x805027d : receive syscall (return)
0x80483b7 : mov dl,byte ptr [ecx+eax]
0x80483c7 : mov byte ptr [ecx+eax],dl
0x80482c6: ret // address: 0xbaaaaef8 value: 0x8050313

---

Negotiated general register: edi:0xc462ce44

Tracing data from eip: 0x805032c tracing source of register: edi (value: 0xc462ce44)

0x805027d : receive syscall (return)
0x80483a3 : mov dl,byte ptr [ecx+eax]
0x80483ad : mov byte ptr [ecx+eax],dl
0x8050321 : mov edi,dword ptr [edx+0x14]
0x805032c: ret // address: edi value: 0xc462ce44