← Thursday, October 8, 2026SecurityVulnerability

C code can call execve without naming the function

wiro.world 7 min read Editor score 7/10

A student describes trying to get shell execution in a grading sandbox that rejects disallowed function names, and notes that the checker parses code with Clang. The technique is relevant to engineers designing source-based restrictions around untrusted code.

What

A student describes trying to call `execve` from C without naming it, to get shell execution in a restricted grading environment.

How

The excerpt explains that ASLR randomizes mapped addresses, while function offsets within a segment remain fixed; offsets vary across machines and library versions.

Why it matters

For systems engineers, the example shows how ASLR and library-version differences complicate assumptions about fixed code addresses.

Read on wiro.world → Lobsters · 8 comments

Headline, summary, brief and diagram are written by a model from the source's own text; the link, byline and numbers come from the source. Read the original before relying on a claim.