[pso] [Tema 1 win] - REPLY - problema la setarea parametrilor syscall-ului pe stiva -MERGE :)

Cristi Lazea cricotanierea at gmail.com
Thu Apr 3 17:02:18 EEST 2008


Intr-adevar, buseam vectorul spt cu dimensiunea parametrilor, in momentul in
care faceam interceptarea.

Mersi mult de "ghidaj" (ca-mi crestea barba pana-i dadeam singur de cap) :)


2008/4/3 Razvan Deaconescu <razvand at cs.pub.ro>:

> On Thu, 2008-04-03 at 15:46 +0300, Cristi Lazea wrote:
> > In old_stask (ebp+8) am exact ce am si in new_stack
> > (afisez in paralel valorile de la cele 2 adrese si sunt identice).
> > Si sunt identice din cauza instructiunii:
> >
> > memcpy(new_stack, old_stack, params);
> >
> > care se apeleaza dupa partea de asm (asa era in curs)
>
> Fa in felul urmator. Afiseaza de la old_stack (ebp+8) in sus argumentele
> primite (eventual in hexa). Trebuie afisata zona (old_stack, old_stack +
> params). Lasa new_stack-ul pe moment. Fa pas cu pas.
>
> Compara cu ce se transmite in functia do_monitor (sau ce nume are) din
> user-space. Daca ce se transmite din user-space nu coincide cu ce ai tu
> in kernel-space inseamna ca busesti in vreun fel stiva in momentul in
> care activezi interceptarea. Problema nu este atunci din functia de
> interceptare ci se intampla ceva dubios la trecerea din user-space in
> kernel-space.
>
> Razvan
>
>
> --
> This message has been scanned for viruses and
> dangerous content by MailScanner, and is
> believed to be clean.
>
> _______________________________________________
> pso mailing list
> pso at cursuri.cs.pub.ro
> http://cursuri.cs.pub.ro/cgi-bin/mailman/listinfo/pso
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://cursuri.cs.pub.ro/pipermail/pso/attachments/20080403/2e7a07ff/attachment.htm 


More information about the pso mailing list