├── CONTRIBUTING.md ├── LICENSE ├── README.md ├── mms_exploit ├── README.md ├── aslr_oracle.py ├── config.json ├── exploit.py ├── mms.py └── qmg_files │ ├── address_probe │ ├── go.bat │ └── poc.asm │ ├── code_exec │ ├── generate_color_table.py │ ├── go.bat │ └── poc.asm │ ├── code_exec_v2 │ ├── generate_color_table.py │ ├── go.bat │ └── poc.asm │ └── crashing_sample │ └── crash.qmg.jpg ├── source ├── Makefile ├── common.cc ├── common.h ├── loader.cc ├── run.sh ├── tokenizer.cc └── tokenizer.h └── third_party └── libdislocator ├── LICENSE ├── README.dislocator └── libdislocator.so.c /CONTRIBUTING.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/googleprojectzero/SkCodecFuzzer/HEAD/CONTRIBUTING.md -------------------------------------------------------------------------------- /LICENSE: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/googleprojectzero/SkCodecFuzzer/HEAD/LICENSE -------------------------------------------------------------------------------- /README.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/googleprojectzero/SkCodecFuzzer/HEAD/README.md -------------------------------------------------------------------------------- /mms_exploit/README.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/googleprojectzero/SkCodecFuzzer/HEAD/mms_exploit/README.md -------------------------------------------------------------------------------- /mms_exploit/aslr_oracle.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/googleprojectzero/SkCodecFuzzer/HEAD/mms_exploit/aslr_oracle.py -------------------------------------------------------------------------------- /mms_exploit/config.json: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/googleprojectzero/SkCodecFuzzer/HEAD/mms_exploit/config.json -------------------------------------------------------------------------------- /mms_exploit/exploit.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/googleprojectzero/SkCodecFuzzer/HEAD/mms_exploit/exploit.py -------------------------------------------------------------------------------- /mms_exploit/mms.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/googleprojectzero/SkCodecFuzzer/HEAD/mms_exploit/mms.py -------------------------------------------------------------------------------- /mms_exploit/qmg_files/address_probe/go.bat: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/googleprojectzero/SkCodecFuzzer/HEAD/mms_exploit/qmg_files/address_probe/go.bat -------------------------------------------------------------------------------- /mms_exploit/qmg_files/address_probe/poc.asm: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/googleprojectzero/SkCodecFuzzer/HEAD/mms_exploit/qmg_files/address_probe/poc.asm -------------------------------------------------------------------------------- /mms_exploit/qmg_files/code_exec/generate_color_table.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/googleprojectzero/SkCodecFuzzer/HEAD/mms_exploit/qmg_files/code_exec/generate_color_table.py -------------------------------------------------------------------------------- /mms_exploit/qmg_files/code_exec/go.bat: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/googleprojectzero/SkCodecFuzzer/HEAD/mms_exploit/qmg_files/code_exec/go.bat -------------------------------------------------------------------------------- /mms_exploit/qmg_files/code_exec/poc.asm: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/googleprojectzero/SkCodecFuzzer/HEAD/mms_exploit/qmg_files/code_exec/poc.asm -------------------------------------------------------------------------------- /mms_exploit/qmg_files/code_exec_v2/generate_color_table.py: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/googleprojectzero/SkCodecFuzzer/HEAD/mms_exploit/qmg_files/code_exec_v2/generate_color_table.py -------------------------------------------------------------------------------- /mms_exploit/qmg_files/code_exec_v2/go.bat: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/googleprojectzero/SkCodecFuzzer/HEAD/mms_exploit/qmg_files/code_exec_v2/go.bat -------------------------------------------------------------------------------- /mms_exploit/qmg_files/code_exec_v2/poc.asm: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/googleprojectzero/SkCodecFuzzer/HEAD/mms_exploit/qmg_files/code_exec_v2/poc.asm -------------------------------------------------------------------------------- /mms_exploit/qmg_files/crashing_sample/crash.qmg.jpg: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/googleprojectzero/SkCodecFuzzer/HEAD/mms_exploit/qmg_files/crashing_sample/crash.qmg.jpg -------------------------------------------------------------------------------- /source/Makefile: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/googleprojectzero/SkCodecFuzzer/HEAD/source/Makefile -------------------------------------------------------------------------------- /source/common.cc: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/googleprojectzero/SkCodecFuzzer/HEAD/source/common.cc -------------------------------------------------------------------------------- /source/common.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/googleprojectzero/SkCodecFuzzer/HEAD/source/common.h -------------------------------------------------------------------------------- /source/loader.cc: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/googleprojectzero/SkCodecFuzzer/HEAD/source/loader.cc -------------------------------------------------------------------------------- /source/run.sh: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/googleprojectzero/SkCodecFuzzer/HEAD/source/run.sh -------------------------------------------------------------------------------- /source/tokenizer.cc: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/googleprojectzero/SkCodecFuzzer/HEAD/source/tokenizer.cc -------------------------------------------------------------------------------- /source/tokenizer.h: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/googleprojectzero/SkCodecFuzzer/HEAD/source/tokenizer.h -------------------------------------------------------------------------------- /third_party/libdislocator/LICENSE: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/googleprojectzero/SkCodecFuzzer/HEAD/third_party/libdislocator/LICENSE -------------------------------------------------------------------------------- /third_party/libdislocator/README.dislocator: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/googleprojectzero/SkCodecFuzzer/HEAD/third_party/libdislocator/README.dislocator -------------------------------------------------------------------------------- /third_party/libdislocator/libdislocator.so.c: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/googleprojectzero/SkCodecFuzzer/HEAD/third_party/libdislocator/libdislocator.so.c --------------------------------------------------------------------------------