суббота, 28 августа 2021 г.

linux kernel tracing

›
It`s hard to believe but linux kernel has almost exact copy of windows ETW - event tracing . It is just as difficult to make it work, it is...
пятница, 27 августа 2021 г.

arm64 disasm for linux kernel

›
I added today disassembler for arm64 linux kernel to search pointers . It turned out to be surprisingly difficult to do for several reason...
понедельник, 23 августа 2021 г.

functions pointers in linux kernel data sections

›
I wrote simple program to estimate size of problem. Yes, I know about CFI  but it seems that even on kernel 5.11 on fresh Ubuntu this mecha...
воскресенье, 15 августа 2021 г.

dumper of linux kernel notification chains

›
There seems to be one little-known thing in linux kernel - notification chains . So they have literal analogue of  PsSetLoadImageNotifyRouti...
четверг, 8 июля 2021 г.

codewars heisenbug

›
 I got following crash when tried to solve some trivial task: UndefinedBehaviorSanitizer:DEADLYSIGNAL ==1==ERROR: UndefinedBehaviorSanitizer...
понедельник, 15 марта 2021 г.

ecdsa in driver

›
Lets assume that we have buggy and dangerous driver (which "rely on many unexported functions and select them via pattern scans which a...
2 комментария:
четверг, 18 февраля 2021 г.

poorgcc: IDA Pro plugin to fix poor gcc code on arm64

›
Lets see what generates gcc for arm64 - for example gcc7.5 and linux kernel Function do_sysinstr : ADRP            X0, #__func__.48604@PAGE...