mirror of
https://github.com/openwall/lkrg.git
synced 2023-12-13 21:30:29 +01:00
3a9ef66437
[2] Add beta version support for ARM64 [3] [ED] Fix FP (race condition) in pCFI in glitching scenario during process update and add memory barrier [4] [ED] Fix potential FP during LKRG unloading procedure and add memory barrier [5] [ED] Create own version of user_access_begin() function compatible across various kernel versions and leverage it for argument extraction for *init_module/delete_module [6] [ED] Fix logic for *init_module/delete_module for kernel with CONFIG_ARCH_HAS_SYSCALL_WRAPPER
75 lines
1.7 KiB
C
75 lines
1.7 KiB
C
/*
|
|
* pi3's Linux kernel Runtime Guard
|
|
*
|
|
* Component:
|
|
* - Resolve kernel symbols
|
|
*
|
|
* Notes:
|
|
* - We try to 'resolve' old-school Linux kernel function for
|
|
* resolving symbols on run-time
|
|
*
|
|
* Timeline:
|
|
* - Created: 24.XI.2015
|
|
*
|
|
* Author:
|
|
* - Adam 'pi3' Zabrocki (http://pi3.com.pl)
|
|
*
|
|
*/
|
|
|
|
#include "../../p_lkrg_main.h"
|
|
|
|
unsigned long (*p_kallsyms_lookup_name)(const char *name) = 0x0;
|
|
|
|
|
|
static int p_lookup_syms_hack(void *unused, const char *name,
|
|
struct module *mod, unsigned long addr) {
|
|
|
|
if (strcmp("kallsyms_lookup_name", name) == 0x0) {
|
|
p_kallsyms_lookup_name = (unsigned long (*)(const char*)) (addr);
|
|
return addr;
|
|
}
|
|
|
|
return 0x0;
|
|
}
|
|
|
|
long get_kallsyms_address(void) {
|
|
|
|
int p_tmp = 0x0;
|
|
int p_ret = P_LKRG_SUCCESS;
|
|
|
|
// STRONG_DEBUG
|
|
p_debug_log(P_LKRG_STRONG_DBG,
|
|
"Entering function <get_kallsyms_address>\n");
|
|
|
|
if ( (p_tmp = kallsyms_on_each_symbol(p_lookup_syms_hack,NULL)) == 0x0) {
|
|
// DEBUG
|
|
p_debug_log(P_LKRG_DBG,
|
|
"kallsyms_on_each_symbol error :(\n");
|
|
p_ret = P_LKRG_GENERAL_ERROR;
|
|
goto get_kallsyms_address_out;
|
|
}
|
|
|
|
p_print_log(P_LKRG_INFO,
|
|
"kallsyms_on_each_symbol() returned => 0x%x [0x%lx]\n",
|
|
p_tmp,
|
|
(unsigned long)p_kallsyms_lookup_name);
|
|
|
|
/*
|
|
#ifdef CONFIG_X86_64 || CONFIG_ARM64
|
|
p_kallsyms_lookup_name = (unsigned long (*)(const char*)) (0xFFFFFFFF00000000 | p_tmp);
|
|
#else
|
|
p_kallsyms_lookup_name = (unsigned long (*)(const char*)) (p_tmp);
|
|
#endif
|
|
|
|
|
|
p_kallsyms_lookup_name = (unsigned long (*)(const char*)) (p_tmp);
|
|
*/
|
|
|
|
get_kallsyms_address_out:
|
|
|
|
// STRONG_DEBUG
|
|
p_debug_log(P_LKRG_STRONG_DBG,
|
|
"Leaving function <get_kallsyms_address> (p_ret => %d)\n",p_ret);
|
|
|
|
return p_ret;
|
|
}
|