Fix hevd module (#16)

This PR fixes a bug in the `fuzzer_hevd.cc logic` where the out buffer pointer was getting overwritten instead of the out buffer size.
0vercl0k · Aug 6, 2021 · bbc75e3 · bbc75e3
1 parent 4714b0c
commit bbc75e3
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/src/wtf/fuzzer_hevd.cc b/src/wtf/fuzzer_hevd.cc
@@ -50,7 +50,7 @@ bool InsertTestcase(const uint8_t *Buffer, const size_t BufferSize) {
 
   g_Backend->R9(IoctlBufferSize);
   const Gva_t Rsp = Gva_t(g_Backend->Rsp());
-  const Gva_t OutBufferSizePtr = Rsp + Gva_t(4 * sizeof(uint64_t));
+  const Gva_t OutBufferSizePtr = Rsp + Gva_t(5 * sizeof(uint64_t));
   if (!g_Backend->VirtWriteStructDirty(OutBufferSizePtr, &IoctlBufferSize)) {
     DebugPrint("VirtWriteStructDirty failed\n");
     return false;