Openwall GNU/*/Linux - a small security-enhanced Linux distro for servers
[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Date: Fri, 15 Mar 2013 02:22:58 +0400
From: "Dmitry V. Levin" <ldv@...linux.org>
To: owl-dev@...ts.openwall.com
Subject: Re: strace

On Fri, Mar 15, 2013 at 01:38:05AM +0400, Solar Designer wrote:
> Dmitry, Pavel -
> 
> On Fri, Mar 15, 2013 at 01:31:22AM +0400, Dmitry V. Levin wrote:
> > On Thu, Mar 14, 2013 at 09:52:40PM +0100, Pavel Kankovsky wrote:
> > > 2.6.18:
> [...]
> > > 2.6.32:
> [...]
> > > orig_eax (syscall number) has shifted.
> > 
> > That's surely the reason.
> 
> Perhaps, but FYI in this case we're talking RHEL5'ish kernel (so 2.6.18
> plus lots of backports, and more), and strace was built with kernel
> headers for the same kernel that it is run with (RHEL5'ish in both cases).

Are you 100% sure that orig_eax offset in the edition of asm/ptrace.h that
was used to build strace is the same as in the kernel under which strace
gets invalid orig_eax?


-- 
ldv

[ CONTENT OF TYPE application/pgp-signature SKIPPED ]

Powered by blists - more mailing lists

Your e-mail address:

Powered by Openwall GNU/*/Linux - Powered by OpenVZ