Prev Next Secure Lazy Binding Slide #14

Lazy binding (trace)

      CALL  sigprocmask(SIG_BLOCK,~0<>)
      RET   sigprocmask 0<>
      CALL  mprotect(0x16bc657ac000,0x3000,0x3<PROT_READ|PROT_WRITE>)
      RET   mprotect 0
      CALL  mprotect(0x16bc657ac000,0x3000,0x1<PROT_READ>)
      RET   mprotect 0
      CALL  sigprocmask(SIG_SETMASK,0<>)
      RET   sigprocmask ~0x10100<SIGKILL|SIGSTOP>
      CALL  ioctl(0,TIOCGETA,0x7f7ffffcbbb0)
      RET   ioctl 0


EuroBSDCon 2014 Copyright © 2014 Philip Guenther