phase 3 issue

[omaralshikh]

I get valid solution for phase 3 but I keep causing a seg fault and im not sure why.
my buffer size is 0x28

[Kenan-Kamel]

The main issue why you get a segfault is because the stack after the return is not setup right. One of the possible solutions to this issue is to push the %rsp value again after returning from the touch function and add more padding. The most import is to review the stack after you perform the operation and make sure it's the same as after your attack is done.