☰

Updated vondehi (markdown)

Anonymous committed 2019-08-26 17:11:01 +0000 commit 436acee57c9924fbc056ee277c448f4a70ecceff

				explain/vondehi.md
			
          @@ -7,7 +7,7 @@ Vondehi is an in-memory unpacker for data compressed with `gzip` or `xz` (or

           1. Set up a memfd using the `memfd_create` syscall. This file descriptor works

              like a regular file, except the backing storage is RAM.

           2. Fork, pipe the payload data to `zcat` or `xzcat`, which outputs everything

          -   to teh memfd from step 1.

          +   to the memfd from step 1.

           3. Run `execveat` on the memfd.

           Of course, the code itself is hand-optimized x86 assembly, and is very crazy.

...	...	@@ -7,7 +7,7 @@ Vondehi is an in-memory unpacker for data compressed with `gzip` or `xz` (or
7	7	1. Set up a memfd using the `memfd_create` syscall. This file descriptor works
8	8	like a regular file, except the backing storage is RAM.
9	9	2. Fork, pipe the payload data to `zcat` or `xzcat`, which outputs everything
10		- to teh memfd from step 1.
	10	+ to the memfd from step 1.
11	11	3. Run `execveat` on the memfd.
12	12
13	13	Of course, the code itself is hand-optimized x86 assembly, and is very crazy.