Exploit hidden __cerror
This commit is contained in:
joerg
parent
ae5295ee5d
commit
d7796dcc07
|
|
@ -30,7 +30,7 @@
|
|||
* SUCH DAMAGE.
|
||||
*
|
||||
* from: @(#)SYS.h 5.5 (Berkeley) 5/7/91
|
||||
* $NetBSD: SYS.h,v 1.10 2007/11/23 07:36:05 dsl Exp $
|
||||
* $NetBSD: SYS.h,v 1.11 2011/11/18 20:43:01 joerg Exp $
|
||||
*/
|
||||
|
||||
#include <machine/asm.h>
|
||||
|
|
@ -49,14 +49,8 @@
|
|||
ENTRY(x); \
|
||||
SYSTRAP(y)
|
||||
|
||||
#ifdef PIC
|
||||
#define _SYSCALL_ERR \
|
||||
mov PIC_GOT(CERROR), %rcx; \
|
||||
jmp *%rcx
|
||||
#else
|
||||
#define _SYSCALL_ERR \
|
||||
jmp CERROR
|
||||
#endif
|
||||
|
||||
#define _SYSCALL(x,y) \
|
||||
.text; _ALIGN_TEXT; \
|
||||
|
|
|
|||
|
|
@ -1,4 +1,4 @@
|
|||
/* $NetBSD: __clone.S,v 1.2 2002/06/06 20:51:17 fvdl Exp $ */
|
||||
/* $NetBSD: __clone.S,v 1.3 2011/11/18 20:43:01 joerg Exp $ */
|
||||
|
||||
/*
|
||||
* Copyright (c) 2002 Wasabi Systems, Inc.
|
||||
|
|
@ -93,9 +93,4 @@ ENTRY(__clone)
|
|||
5:
|
||||
popq %r13
|
||||
popq %r12
|
||||
#ifdef PIC
|
||||
movq PIC_GOT(CERROR),%rdx
|
||||
jmp *%rdx
|
||||
#else
|
||||
jmp CERROR
|
||||
#endif
|
||||
|
|
|
|||
|
|
@ -1,4 +1,4 @@
|
|||
/* $NetBSD: __vfork14.S,v 1.3 2003/08/07 16:42:37 agc Exp $ */
|
||||
/* $NetBSD: __vfork14.S,v 1.4 2011/11/18 20:43:01 joerg Exp $ */
|
||||
|
||||
/*-
|
||||
* Copyright (c) 1990 The Regents of the University of California.
|
||||
|
|
@ -36,7 +36,7 @@
|
|||
|
||||
#include <machine/asm.h>
|
||||
#if defined(SYSLIBC_SCCS) && !defined(lint)
|
||||
RCSID("$NetBSD: __vfork14.S,v 1.3 2003/08/07 16:42:37 agc Exp $")
|
||||
RCSID("$NetBSD: __vfork14.S,v 1.4 2011/11/18 20:43:01 joerg Exp $")
|
||||
#endif /* SYSLIBC_SCCS and not lint */
|
||||
|
||||
#include "SYS.h"
|
||||
|
|
@ -57,9 +57,4 @@ ENTRY(__vfork14)
|
|||
jmp *%r9
|
||||
err:
|
||||
pushq %r9
|
||||
#ifdef PIC
|
||||
movq PIC_GOT(CERROR), %rcx
|
||||
jmp *%rcx
|
||||
#else
|
||||
jmp CERROR
|
||||
#endif
|
||||
|
|
|
|||
|
|
@ -1,4 +1,4 @@
|
|||
/* $NetBSD: brk.S,v 1.3 2003/08/07 16:42:37 agc Exp $ */
|
||||
/* $NetBSD: brk.S,v 1.4 2011/11/18 20:43:01 joerg Exp $ */
|
||||
|
||||
/*-
|
||||
* Copyright (c) 1990 The Regents of the University of California.
|
||||
|
|
@ -36,7 +36,7 @@
|
|||
|
||||
#include <machine/asm.h>
|
||||
#if defined(SYSLIBC_SCCS) && !defined(lint)
|
||||
RCSID("$NetBSD: brk.S,v 1.3 2003/08/07 16:42:37 agc Exp $")
|
||||
RCSID("$NetBSD: brk.S,v 1.4 2011/11/18 20:43:01 joerg Exp $")
|
||||
#endif /* SYSLIBC_SCCS and not lint */
|
||||
|
||||
#include "SYS.h"
|
||||
|
|
@ -68,8 +68,7 @@ ENTRY(_brk)
|
|||
xorl %eax,%eax
|
||||
ret
|
||||
err:
|
||||
movq PIC_GOT(CERROR),%rdx
|
||||
jmp *%rdx
|
||||
jmp CERROR
|
||||
#else
|
||||
cmpq %rdi,_C_LABEL(__minbrk)(%rip)
|
||||
jb 1f
|
||||
|
|
|
|||
|
|
@ -1,4 +1,4 @@
|
|||
/* $NetBSD: exect.S,v 1.2 2003/08/07 16:42:37 agc Exp $ */
|
||||
/* $NetBSD: exect.S,v 1.3 2011/11/18 20:43:01 joerg Exp $ */
|
||||
|
||||
/*-
|
||||
* Copyright (c) 1990 The Regents of the University of California.
|
||||
|
|
@ -36,7 +36,7 @@
|
|||
|
||||
#include <machine/asm.h>
|
||||
#if defined(SYSLIBC_SCCS) && !defined(lint)
|
||||
RCSID("$NetBSD: exect.S,v 1.2 2003/08/07 16:42:37 agc Exp $")
|
||||
RCSID("$NetBSD: exect.S,v 1.3 2011/11/18 20:43:01 joerg Exp $")
|
||||
#endif /* SYSLIBC_SCCS and not lint */
|
||||
|
||||
#include "SYS.h"
|
||||
|
|
@ -47,9 +47,4 @@ ENTRY(exect)
|
|||
orb $(PSL_T>>8),1(%rsp)
|
||||
popfq
|
||||
SYSTRAP(execve)
|
||||
#ifdef PIC
|
||||
movq PIC_GOT(CERROR), %rcx
|
||||
jmp *%rcx
|
||||
#else
|
||||
jmp CERROR
|
||||
#endif
|
||||
|
|
|
|||
|
|
@ -1,4 +1,4 @@
|
|||
/* $NetBSD: ptrace.S,v 1.2 2003/08/07 16:42:37 agc Exp $ */
|
||||
/* $NetBSD: ptrace.S,v 1.3 2011/11/18 20:43:01 joerg Exp $ */
|
||||
|
||||
/*-
|
||||
* Copyright (c) 1990 The Regents of the University of California.
|
||||
|
|
@ -36,7 +36,7 @@
|
|||
|
||||
#include <machine/asm.h>
|
||||
#if defined(SYSLIBC_SCCS) && !defined(lint)
|
||||
RCSID("$NetBSD: ptrace.S,v 1.2 2003/08/07 16:42:37 agc Exp $")
|
||||
RCSID("$NetBSD: ptrace.S,v 1.3 2011/11/18 20:43:01 joerg Exp $")
|
||||
#endif /* SYSLIBC_SCCS and not lint */
|
||||
|
||||
#include "SYS.h"
|
||||
|
|
@ -54,9 +54,4 @@ ENTRY(ptrace)
|
|||
jc err
|
||||
ret
|
||||
err:
|
||||
#ifdef PIC
|
||||
movq PIC_GOT(CERROR), %rcx
|
||||
jmp *%rcx
|
||||
#else
|
||||
jmp CERROR
|
||||
#endif
|
||||
|
|
|
|||
|
|
@ -1,4 +1,4 @@
|
|||
/* $NetBSD: sbrk.S,v 1.3 2008/07/02 20:07:43 rmind Exp $ */
|
||||
/* $NetBSD: sbrk.S,v 1.4 2011/11/18 20:43:01 joerg Exp $ */
|
||||
|
||||
/*-
|
||||
* Copyright (c) 1990 The Regents of the University of California.
|
||||
|
|
@ -36,7 +36,7 @@
|
|||
|
||||
#include <machine/asm.h>
|
||||
#if defined(SYSLIBC_SCCS) && !defined(lint)
|
||||
RCSID("$NetBSD: sbrk.S,v 1.3 2008/07/02 20:07:43 rmind Exp $")
|
||||
RCSID("$NetBSD: sbrk.S,v 1.4 2011/11/18 20:43:01 joerg Exp $")
|
||||
#endif /* SYSLIBC_SCCS and not lint */
|
||||
|
||||
#include "SYS.h"
|
||||
|
|
@ -67,8 +67,7 @@ ENTRY(_sbrk)
|
|||
out:
|
||||
ret
|
||||
err:
|
||||
mov PIC_GOT(CERROR),%rdx
|
||||
jmp *%rdx
|
||||
jmp CERROR
|
||||
#else
|
||||
movq CURBRK(%rip),%rax
|
||||
test %rdi,%rdi
|
||||
|
|
|
|||
Loading…
Reference in New Issue