exploit-1.c: In function 'prepare_pipe':
exploit-1.c:49:41: error: 'F_GETPIPE_SZ' undeclared (first use in this function)
const unsigned pipe_size = fcntl(p[1], F_GETPIPE_SZ);
^~~~~~~~~~~~
exploit-1.c:49:41: note: each undeclared identifier is reported only once for each function it appears in
exploit-1.c: In function 'main':
exploit-1.c:96:2: error: unknown type name 'loff_t'; did you mean 'lloff_t'?
loff_t offset = 4; // after the "root"
^~~~~~
lloff_t
exploit-1.c:106:8: error: unknown type name 'loff_t'
const loff_t next_page = (offset | (PAGE_SIZE - 1)) + 1;
^~~~~~
exploit-1.c:107:8: error: unknown type name 'loff_t'
const loff_t end_offset = offset + (loff_t)data_size;
^~~~~~
exploit-1.c:107:38: error: 'loff_t' undeclared (first use in this function); did you mean 'lloff_t'?
const loff_t end_offset = offset + (loff_t)data_size;
^~~~~~
lloff_t
exploit-1.c:107:45: error: expected ',' or ';' before 'data_size'
const loff_t end_offset = offset + (loff_t)data_size;
^~~~~~~~~
exploit-1.c:146:19: warning: implicit declaration of function 'splice'; did you mean 'stime'? [-Wimplicit-function-declaration]
ssize_t nbytes = splice(fd, &offset, p[1], NULL, 1, 0);
^~~~~~
stime
exploit-2.c: In function 'prepare_pipe':
exploit-2.c:102:44: error: 'F_GETPIPE_SZ' undeclared (first use in this function)
const unsigned pipe_size = fcntl(p[1], F_GETPIPE_SZ);
^~~~~~~~~~~~
exploit-2.c:102:44: note: each undeclared identifier is reported only once for each function it appears in
exploit-2.c: In function 'hax':
exploit-2.c:143:22: warning: implicit declaration of function 'splice'; did you mean 'stime'? [-Wimplicit-function-declaration]
ssize_t nbytes = splice(fd, &offset, p[1], NULL, 1, 0);
^~~~~~

Hi,

After watching your video on this exploit I wanted to see if it would work on the bandit machines from the overthewire challenges. Even though the dirty pipe checker says its vulnerable since the version is 5.15.0, when I run exploit 1 it says system() function failed and when I run exploit 2 it says /tmp/sh: permission denied. I've included a screenshot below. Any idea what's causing this? This machine should be vulnerable but its not working so did the guys from bandit labs somehow fix this without updating the kernel?

Thx!

exploit-1.c: In function 'prepare_pipe':
exploit-1.c:49:48: error: 'F_GETPIPE_SZ' undeclared (first use in this function)
49 | const unsigned pipe_size = fcntl(p[1], F_GETPIPE_SZ);
| ^~~~~~~~~~~~
exploit-1.c:49:48: note: each undeclared identifier is reported only once for each function it appears in
exploit-2.c: In function 'prepare_pipe':
exploit-2.c:102:44: error: 'F_GETPIPE_SZ' undeclared (first use in this function)
102 | const unsigned pipe_size = fcntl(p[1], F_GETPIPE_SZ);
| ^~~~~~~~~~~~
exploit-2.c:102:44: note: each undeclared identifier is reported only once for each function it appears in

when running the command ./exploit-1, there seems to be an output saying that sys call failed