Tags: pwn rop
Rating:
Leak stack variables and libc address from uninitialized buffer, overflow the last read by providing a negative length, rop to system. Full writeup here
I don't remember