CVE-2018-4243

This exploit demonstrates a kernel heap overflow in macOS/iOS due to insufficient buffer size validation in the `getvolattrlist` function. By supplying a small buffer size while requesting `ATTR_CMN_RETURNED_ATTRS`, the kernel copies data beyond the allocated buffer, leading to a heap-based overflow.

This is a working exploit for CVE-2018-4243, an iOS kernel vulnerability in the `getvolattrlist` function that allows a NULL pointer write off the end of a kalloc.16 allocation. The exploit targets `struct ipc_port` to achieve kernel read/write access on iOS 11.0-11.3.1.