shushpancheak / shush-stack Goto Github PK

It is possible to get access to the data in buffer of shush-stack and to delete it. This will cause the segfault of the program without calling Dump. It also won't be stated in the logger file.

It is quite easy to get the pointer to the hash of shush-stack, as well as the pointer to the element of shush-stack. Then it is possible to change the value of the element and to replace hash with a new, fake one. The fake hash might be calculated with std::hash<string_view> as it is calculated inside shush-stack. After that shush-stack will be still unbroken, the dumper won't be called, but the data inside will be replaced. Although this problem might be catched with logger.