
ALT Screenshot of slides showing three components as boxes: On the left, the box "preconditions" marks the state before exploitation. It defines exemplary values for the registers rax and rbx. In the mid of the picture, a large box representing the space of all possible gadget chains is visible. A matrix if 4x3 gadgets can be seen. Each gadget has each gadget of the subsequent column as potential successor (marked by a dashed line). From the gadget in row 1, column 1 a bold arrow to gadget in row 3, column 2 is visible. Another bold arrow from the latter to the gadget in row 2, column 3 is visible. The bold areas mark one possible gadget chain. Left of the box representing the gadget chains, another box called "postconditions" is visible. It represents the state "after exploitation", i.e, the state the attacker wants the gadget chain to reach. In the box, exemplary values for the register rax and rbx are set.



























