RE: partial analysis of vulndev-1.c

["David Schwartz" <davids () webmaster com>]

> actually, during debugging i used a modified version with #define SIZE 10.
> this one did not produce a SIGSEGV.
> when realising that others were able to produce one (Nexus for example),
> i checked the unmodified. it produces a SIGSEGV.
>
> does someone know, why the modified does not produce one?

        Most likely the memory allocator never allocated blocks that small. So when
you asked for a 10-byte block, you got one that was 14 or 16 bytes or
possibly even more.

        DS