chain.payload_len is changed in angrop

angr · Feb 7, 2025 · ed9a44a · ed9a44a
1 parent 50091e1
commit ed9a44a
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/rex/exploit/technique.py b/rex/exploit/technique.py
@@ -484,7 +484,7 @@ def _ip_overwrite_with_chain(self, chain, state=None, assert_next_ip_controlled=
                 chain_addr = addr
                 chain_cp = chain.copy()
                 chain_cp._values = chain_cp._values[1:]
-                chain_cp.payload_len -= self.crash.project.arch.bytes
+                chain_cp._payload_len -= self.crash.project.arch.bytes
                 # extra checks for ip control
                 if assert_next_ip_controlled:
                     ip_bv = state.memory.load(chain_addr + chain.payload_len, self.crash.project.arch.bytes)