☰
Current Page
Main Menu
Home
Home
Editing vondehi
Edit
Preview
H1
H2
H3
default
Set your preferred keybinding
default
vim
emacs
markdown
Set this page's format to
Markdown
Plain Text
RDoc
Rendering unavailable for
AsciiDoc
BibTeX
Creole
MediaWiki
Org-mode
Pod
reStructuredText
Textile
Help 1
Help 1
Help 1
Help 2
Help 3
Help 4
Help 5
Help 6
Help 7
Help 8
Autosaved text is available. Click the button to restore it.
Restore Text
## vondehi Vondehi is an in-memory unpacker for data compressed with `gzip` or `xz` (or `xz` in LZMA1-mode). It basically performs these steps: 1. Set up a memfd using the `memfd_create` syscall. This file descriptor works like a regular file, except the backing storage is RAM. 2. Fork, pipe the payload data to `zcat` or `xzcat`, which outputs everything to the memfd from step 1. 3. Run `execveat` on the memfd. Of course, the code itself is hand-optimized x86 assembly, and is very crazy.
Uploading file...
Edit message:
Cancel