I am building a ROP chain for a security challenge. I have a problem in my ROP chain. I found some interesting gadgets with ropshell.com, and they seem to work pretty well except one. Indeed I follow the stack pointer on gdb peda and only one instruction has a problem which is pop eax, ret
at the address 0x080a9d36
. This instruction contains no null bytes but the stack pointer apparently doesn't recognize it and send me a segfault Stopped reason: SIGSEGV - 0x08009d36 in ?? ()
.
I just don't understand why the 0a
becomes suddenly a 00
. Would someone have an idea ? Thanks.