[PD-dev] writing exploits in Pd (Re: [PD] [file])

[Christof Ressi]

Writing to "C:/" and "C:/Windows" silently fails. "/tmp" obviously 
doesn't exist on Windows. "C:/Temp" should be "C:/Windows/Temp" - then 
it works!

However, it would only show the dialog for a split second and the crash. 
I ran it in a debugger and just get a completely wiped stack. If I 
remove the "quit" message, it works.

So how do I pay the money?

Christof

On 31.08.2021 15:49, IOhannes m zmoelnig wrote:
> On 8/31/21 3:12 PM, Christof Ressi wrote:
>> The exploit successfully changes my MIDI settings and adds search 
>> paths, but unfortunately it crashes with a completely wiped stack 
>> before showing me the Tk dialog :-(
>
> you mean, it successfully creates an exploit-plugin.tcl but cannot run 
> it?
> (if so could you send me the created file?)
>
> the exploit actually works like this:
> - user runs exploit.pd
>   - this writes a GUI-plugin to your harddisk
>   - and adds the GUI-plugin's path to the search paths
> - exploit.pd then forcefully quites Pd (so the user is triggered to 
> restart Pd)
> - on Pd's restart, the new search-paths are searched, and the 
> GUI-plugin is found and executed
> - i earn plenty of money
>
> gmasdr
> IOhannes
>
>
> _______________________________________________
> Pd-dev mailing list
> Pd-dev at lists.iem.at
> https://lists.puredata.info/listinfo/pd-dev
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.puredata.info/pipermail/pd-dev/attachments/20210831/3245869b/attachment.htm>