Editing
vondehi
View Page
Page History
Bold
Italic
Code
Unordered List
Ordered List
Blockquote
Horizontal Rule
h1
h2
h3
Link
Image
Help
Edit Mode
AsciiDoc
Creole
Markdown
MediaWiki
Org-mode
Plain Text
Pod
RDoc
reStructuredText
Textile
Help 1
Help 1
Help 1
Help 2
Help 3
Help 4
Help 5
Help 6
Help 7
Help 8
## vondehi Vondehi is an in-memory unpacker for data compressed with `gzip` or `xz` (or `xz` in LZMA1-mode). It basically performs these steps: 1. Set up a memfd using the `memfd_create` syscall. This file descriptor works like a regular file, except the backing storage is RAM. 2. Fork, pipe the payload data to `zcat` or `xzcat`, which outputs everything to the memfd from step 1. 3. Run `execveat` on the memfd. Of course, the code itself is hand-optimized x86 assembly, and is very crazy.
Uploading file ...
Edit message:
Preview