↧
Answer by Ian Abbott for Kernel module crash when reading system call table...
(0. Why does it crash and what can i do about it?) If the kernel configuration includes CONFIG_RANDOMIZE_BASE=y, the system call table will be at a random offset from the address specified in the...
View ArticleKernel module crash when reading system call table function address
I am studying rootkits and trying to hook the system call table. As i can already dynamically retrieve the table's address from /boot/System.map-$(uname -r), i traced and isolated the problematic part...
View Article