Bomb Lab Phase 6

LAB3-bomblab/bomb.s

@@ -633,6 +633,7 @@ Disassembly of section .text:
  8048f03:	83 fb 05             	cmp    $0x5,%ebx ;if j<=5, jump to 8048ef1
  8048f06:	7e e9                	jle    8048ef1 <phase_6+0x40>
  8048f08:	eb c5                	jmp    8048ecf <phase_6+0x1e> ;jump to next i of outer loop
+
  8048f0a:	8b 52 08             	mov    0x8(%edx),%edx
  8048f0d:	83 c0 01             	add    $0x1,%eax
  8048f10:	39 c8                	cmp    %ecx,%eax
@@ -652,6 +653,7 @@ Disassembly of section .text:
  8048f32:	b8 01 00 00 00       	mov    $0x1,%eax
  8048f37:	ba 3c c1 04 08       	mov    $0x804c13c,%edx
  8048f3c:	eb cc                	jmp    8048f0a <phase_6+0x59>
+ 
  8048f3e:	8b 5c 24 28          	mov    0x28(%esp),%ebx
  8048f42:	8d 44 24 2c          	lea    0x2c(%esp),%eax
  8048f46:	8d 74 24 40          	lea    0x40(%esp),%esi
@@ -664,6 +666,7 @@ Disassembly of section .text:
  8048f58:	89 d1                	mov    %edx,%ecx
  8048f5a:	eb f0                	jmp    8048f4c <phase_6+0x9b>
  8048f5c:	c7 42 08 00 00 00 00 	movl   $0x0,0x8(%edx)
+
  8048f63:	be 05 00 00 00       	mov    $0x5,%esi
  8048f68:	8b 43 08             	mov    0x8(%ebx),%eax
  8048f6b:	8b 00                	mov    (%eax),%eax

LAB3-bomblab/func4.c

@@ -14,4 +14,25 @@ int func4(int x, int y, int z)
     a++;
     ret = func4(x, a, z);
     return ret * 2 + 1;
+}
+
+int *n[6],l;
+node *head = 0x804c13c, *p;
+for (int k = 0; k < 6; i++)
+{
+    if (a[k] == 1)
+    {
+        n[k] = (int *)head;
+    }
+    else
+    {
+        p = head;
+        l=1;
+        do
+        {
+            p = p->next;
+            l++;
+        } while (l != a[k]);
+        n[k] = (int *)p;
+    }
 }

LAB3-bomblab/solution.txt

@@ -2,4 +2,5 @@ You can Russia from land here in Alaska.
 0 1 1 2 3 5
 0 h 395
 0 0
--&#$('
+-&#$('
+2 6 1 3 5 4