{"action":"created","issue":{"url":"https://api.github.com/repos/timwr/CVE-2016-5195/issues/7","repository_url":"https://api.github.com/repos/timwr/CVE-2016-5195","labels_url":"https://api.github.com/repos/timwr/CVE-2016-5195/issues/7/labels{/name}","comments_url":"https://api.github.com/repos/timwr/CVE-2016-5195/issues/7/comments","events_url":"https://api.github.com/repos/timwr/CVE-2016-5195/issues/7/events","html_url":"https://github.com/timwr/CVE-2016-5195/issues/7","id":184934628,"number":7,"title":"Exploit not working","user":{"login":"forced-request","id":961246,"avatar_url":"https://avatars.githubusercontent.com/u/961246?v=3","gravatar_id":"","url":"https://api.github.com/users/forced-request","html_url":"https://github.com/forced-request","followers_url":"https://api.github.com/users/forced-request/followers","following_url":"https://api.github.com/users/forced-request/following{/other_user}","gists_url":"https://api.github.com/users/forced-request/gists{/gist_id}","starred_url":"https://api.github.com/users/forced-request/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/forced-request/subscriptions","organizations_url":"https://api.github.com/users/forced-request/orgs","repos_url":"https://api.github.com/users/forced-request/repos","events_url":"https://api.github.com/users/forced-request/events{/privacy}","received_events_url":"https://api.github.com/users/forced-request/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":26,"created_at":"2016-10-24T19:38:34Z","updated_at":"2016-11-17T11:22:51Z","closed_at":null,"body":"Hello, I've been trying to get this to work and am running into the following. It looks like it's not properly swapping out the `run-as` command, despite saying `exploited`\n\n```\n$ make root\nndk-build NDK_PROJECT_PATH=. APP_BUILD_SCRIPT=./Android.mk APP_PLATFORM=android-21\n[arm64-v8a] Install        : dirtycow => libs/arm64-v8a/dirtycow\n[arm64-v8a] Install        : run-as => libs/arm64-v8a/run-as\n[x86_64] Install        : dirtycow => libs/x86_64/dirtycow\n[x86_64] Install        : run-as => libs/x86_64/run-as\n[mips64] Install        : dirtycow => libs/mips64/dirtycow\n[mips64] Install        : run-as => libs/mips64/run-as\n[armeabi-v7a] Install        : dirtycow => libs/armeabi-v7a/dirtycow\n[armeabi-v7a] Install        : run-as => libs/armeabi-v7a/run-as\n[armeabi] Install        : dirtycow => libs/armeabi/dirtycow\n[armeabi] Install        : run-as => libs/armeabi/run-as\n[x86] Install        : dirtycow => libs/x86/dirtycow\n[x86] Install        : run-as => libs/x86/run-as\n[mips] Install        : dirtycow => libs/mips/dirtycow\n[mips] Install        : run-as => libs/mips/run-as\nadb push libs/armeabi/dirtycow /data/local/tmp/dirtycow\n[100%] /data/local/tmp/dirtycow\nadb push libs/armeabi/run-as /data/local/tmp/run-as\n[100%] /data/local/tmp/run-as\nadb shell 'chmod 777 /data/local/tmp/run-as'\nadb shell '/data/local/tmp/dirtycow /system/bin/run-as /data/local/tmp/run-as'\nwarning: new file size (13776) and file old size (14192) differ\n\nsize 14192\n\n\n[*] mmap 0xf70b1000\n[*] exploit (patch)\n[*] currently 0xf70b1000=464c457f\n[*] madvise = 0xf70b1000 14192\n[*] madvise = 0 1048576\n[*] /proc/self/mem -1048576 1048576\n[*] exploited 0xf70b1000=464c457f\nadb shell /system/bin/run-as\nrun-as: Usage:\n    run-as <package-name> [--user <uid>] <command> [<args>]\n```\n"},"comment":{"url":"https://api.github.com/repos/timwr/CVE-2016-5195/issues/comments/261222616","html_url":"https://github.com/timwr/CVE-2016-5195/issues/7#issuecomment-261222616","issue_url":"https://api.github.com/repos/timwr/CVE-2016-5195/issues/7","id":261222616,"user":{"login":"rootbdfy","id":18612349,"avatar_url":"https://avatars.githubusercontent.com/u/18612349?v=3","gravatar_id":"","url":"https://api.github.com/users/rootbdfy","html_url":"https://github.com/rootbdfy","followers_url":"https://api.github.com/users/rootbdfy/followers","following_url":"https://api.github.com/users/rootbdfy/following{/other_user}","gists_url":"https://api.github.com/users/rootbdfy/gists{/gist_id}","starred_url":"https://api.github.com/users/rootbdfy/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/rootbdfy/subscriptions","organizations_url":"https://api.github.com/users/rootbdfy/orgs","repos_url":"https://api.github.com/users/rootbdfy/repos","events_url":"https://api.github.com/users/rootbdfy/events{/privacy}","received_events_url":"https://api.github.com/users/rootbdfy/received_events","type":"User","site_admin":false},"created_at":"2016-11-17T11:22:51Z","updated_at":"2016-11-17T11:22:51Z","body":"```\r\nWARNING: linker: run-as: unused DT entry: type 0x6ffffffe arg 0x690\r\nWARNING: linker: run-as: unused DT entry: type 0x6fffffff arg 0x1\r\n```\r\nSame problem on meizu m2 note (arm64-v8a)"}}
{"actor":{"display_login":"rootbdfy"}}