Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Test processes that make 32-bit syscalls on x64_64 #78

Open
ArcaneNibble opened this issue Dec 29, 2023 · 0 comments
Open

Test processes that make 32-bit syscalls on x64_64 #78

ArcaneNibble opened this issue Dec 29, 2023 · 0 comments

Comments

@ArcaneNibble
Copy link

Hi,

I attended the 37c3 Tor meetup talk on this project and thought of a potential issue that this tool might not handle, and I was asked to file an issue to test it.

On x64_64, a 64-bit process is still able to make 32-bit int 0x80 syscalls. This will use different syscall numbers and requires a separate table. See this as an example, and this on detecting and handling this situation with ptrace.

A cursory skim of the code in u-root looks like it does not handle this.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant