DJ Sunshine dev-zzo

PXD File Format Description

This file is created in response to rather poor documentation [1] for PXD file format consumed by Autodesk Pixlr and other peoducts (e.g., Autodesk SketchBook Pro).

File Layout

The PXD file, as noted by the few lines in the docs, consists of a header, followed by an array of layers, and then with composite pixel data (on versions >= 3?). All integers within the file are big-endian. The whole file is compressed with zlib.

Global pointer variables misused in C programs

TL;DR: load global variables into local ones before use.

I've spotted a quite widespread misuse of global pointer variables. The issue is easily demonstrated by the following simplified example.

struct some_type_t {
    int a1;
    int a2;

	/*
	* D-LINK products formware image unpacker tool.
	* Written by dev_zzo for personal research.
	* Use at your own risk.
	*/

	#include <stdio.h>
	#include <stdint.h>
	#include <endian.h>
	#include <malloc.h>

	#
	# BUGS:
	#
	# * Data is not handled at all.
	#
	# * Imports which are either IMPORT_NAME_NOPREFIX or IMPORT_NAME_UNDECORATE
	# should be properly restored -- make a huge map?..
	#

	import idaapi

	//
	// copyright (c) 2014 by [email protected]
	//______________________________________________________________________________
	//
	`timescale 1ns / 1ns

	module vm80a
	(
	input pin_clk, // global module clock (no in original 8080)
	input pin_f1, // clock phase 1 (used as clock enable)

	//--------------------------------------
	//--- 010 Editor v6.0 Binary Template
	//
	// File: ff4save.bt
	// Author: DJ
	// Revision: 1
	// Purpose: Parse FF4 save slot.
	//--------------------------------------

	local int doSteam = -1;

	"""

	SAGEM ROUTER FAST 3304/3464/3504 - telnet root password generator.

	Work based on: http://1337day.com/exploit/16687

	"""

	import sys

	#!/usr/bin/python
	"""Utility functions to work with character patterns."""

	__lower_alpha = 'abcdefghijklmnopqrstuvwxyz'
	__upper_alpha = 'ABCDEFGHIJKLMNOPQRSTUVWXYZ'
	__numeric = '0123456789'

	def pattern_create(length, charsets=None):
	"""Generates a unique, nonrepeating pattern of a given length.

	<?xml version="1.0"?>
	<root xmlns="urn:schemas-upnp-org:device-1-0">
	<specVersion>
	<major>1</major>
	<minor>0</minor>
	</specVersion>
	<URLBase>http://172.16.90.254:49152</URLBase>
	<device>
	<deviceType>urn:schemas-upnp-org:device:InternetGatewayDevice:1</deviceType>
	<friendlyName>Cisco VPN Router</friendlyName>

	MS16-005 (CVE-2016-0009) Win32k Remote Code Execution Vulnerability info

	just look at PFTOBJ::bUnloadAllButPermanentFonts