kaniinii should note that i was fundamentally opposed to having the vtable in `mowgli.string`, but Pippijn was insistent that it was somehow convenient to have it.
almost everyone just uses mowgli_string_foo functions with it anyway.
hopefully these people remove the vtable when fixing the hole properly, because you get some really nice gadgets for crafting a ret2libc attack there :)
All Jonkman Microblog content and data are available under the