ioctl

Mm.

Um, uh, you know, walking through the attack, right? Um, it says, "The issue resides in the I..." Don't worry about the functions, but the ioctl_get_ownership function.

Okay, great.

So there's some sort of function that pulls ownership.

Where you had to declare whether this was a signed or an unsigned integer, and then when you went to, to make a comparison, it would then say, oh, well, I'm comparing this to a particular number.

So in this particular case, all right, now that we know what signed is in comparison, um, the atomic read function, nobody cares, operates and returns a signed integer.

So if you call ioctl_cancel_flag, doesn't matter, the value becomes negative during the signed path.

Okay.

So whatever the WeHack Health juju that was supposed to rub off on us didn't.

We're both kind of dragging, aren't you? Yeah.

Yeah, I don't know if it's because I'm 32 now and I haven't done the Black Hat DEFCON double-hider since I was 19, but I've basically been in survival mode since day three of Black Hat, and I'm still recovering.

I think probably by next Monday, we'll be good to go.

Us being who we are, we got pulled over a whole lot.

It was hard to exist anonymously in corners of DEF CON.

Uh, more black hat for me, more Defcon for you, which is kind of funny to watch, right? Like we, we both got recognized, uh, at different places, but, uh, yeah, we like, I, I was supposed to be there Monday to Sunday and I changed my flight and got out Saturday.

I'm so glad I did to just have Sunday to just like couch, you know, Sunday was couch.