a) Return-To-Libc x86 The Theory : During a return-to-libc attack, more than one function can be executed in a row. Assume that we control a stack-based buffer overflow in function vuln that allows us to overwrite the stack frame. i) Prepare the following stack frame of function vuln, such that first library function f and subsequently function g is executed.

Following information about f and g are known: f is at address f_addr and expects one parameter (label: f_arg1) g is at address g_addr and expects two parameters (labels: g_arg1, g_arg2)

ii) Would it be problematic if function f expects more than one parameter? Does this restriction apply to function g as well? Explain concisely.

iii) What is the problem if we want to call a third function after f and g? Explain concisely.

Stackframe from vuln Stackframe from vuln during a benign execution including the exploit