Since the issue is the heap frees the memory before the payload can execute couldn't we do protect the memory pages like this guy/girl? wrote:
September 21, 2012 at 5:26 am
Might be obvious but:
Canít you use mprotect() on this memory pages before itís freed and write a signal handler (cause trying to write on it will trigger a SEGV).