Consolidation & Overlapping Chunks

These techniques focus on manipulating chunk boundaries and triggering consolidation (merging) to create “ghost” chunks that encompass other active allocations.

TechniqueDescription
Overlapping ChunksSimple size overwrite to expand a chunk.
Non-adjacent ConsolidationConsolidating across an allocated chunk.
Poison Null ByteShrinking a chunk via off-by-one null byte.
House of EinherjarTriggering massive backward consolidation.
Mmap OverlapAchieving overlap in the mmap region.
Table 1: Attacks centered on consolidation and overlap.