Find the address for variable buf. In the hex representation of this address, how many letter $"$f$"$ does it have?

Flag question: Question $2$

Question $25$ pts

What is the address of write$\_$secret $($the function$)$ in hex?

Flag question: Question $3$

Question $35$ pts

Find the address for variable p$.$ In its hex representation, what comes immediately after the last letter $"$f$"?$

Flag question: Question $4$

Question $410$ pts

What the address of variable ptrs in hex?

Flag question: Question $5$

Question $55$ pts

What is the adress of ptrs$[1]$

Group of answer choices

$0$x$804$a$0$d$8$

$0$x$80460$e$4$

$0$x$804$b$0$d$10$

$0$x$804$a$844$

Flag question: Question $6$

Question $640$ pts

What input do you provide to the program so that ptrs$[$s$]$ reads $($and then tries to execute$)$ the content of local variable p instead of a function pointer stored in the buffer pointed to by ptr$?$ If successful, you will end up executing the pat$\_$on$\_$back function.

Obtain your answer as an unsigned integer in decimal.

Flag question: Question $7$

Question $710$ pts

Find value x such that the content of buf$[$x$]$ equals the content of r$.$ Both buf and r are variables in the main program.

Flag question: Question $8$

Question $85$ pts

Find value x such that the address of buf$[$x$]$ equals to the address of p$.$ Both buf and p are variables in the main program.

Group of answer choices

$1028$

$960$

$512$

$128$

Flag question: Question $9$

Question $95$ pts

Find value x such that pat$[$x$]$ starts to overflow buffer pat and access content of variable secret so that the pat$[$x$]$ equals to character $\text{'}$y$\text{'}.$ Both pat and secret are global variables.

Flag question: Question $10$

Question $1010$ pts

Attackers can read sensitive information contained in memory by reading past a vulnerable buffer. Variable head is the head of a link list in this program. Find x such that the address of pat$[$x$]$ equals the the address of head.