http://techblog.iamzellux.com/2010/01/force-int-0x80-for-syscall/ Security, Kernel, Virtualization, Programming Languages Sat, 03 Jul 2010 00:28:54 +0000 hourly 1 http://wordpress.org/?v=3.0 http://techblog.iamzellux.com/2010/01/force-int-0x80-for-syscall/comment-page-1/#comment-280 zellux Mon, 08 Mar 2010 14:05:30 +0000 http://techblog.iamzellux.com/?p=62453#comment-280 没接触过KVM，不大清楚。zellux at hotmail/gmail都可以。 没接触过KVM，不大清楚。zellux at hotmail/gmail都可以。

]]> http://techblog.iamzellux.com/2010/01/force-int-0x80-for-syscall/comment-page-1/#comment-279 Zhongshu Mon, 08 Mar 2010 13:49:43 +0000 http://techblog.iamzellux.com/?p=62453#comment-279 I just use the kvm to run linux and sep flag is disabled in this situation. Do u know how to enable it in kvm? Do you use msn or other IM? I just use the kvm to run linux and sep flag is disabled in this situation. Do u know how to enable it in kvm? Do you use msn or other IM?

]]> http://techblog.iamzellux.com/2010/01/force-int-0x80-for-syscall/comment-page-1/#comment-278 zellux Mon, 08 Mar 2010 08:26:52 +0000 http://techblog.iamzellux.com/?p=62453#comment-278 问了下实验室的学长，好像不是我理解的那样。他说glibc.so相关的代码只负责跳转（类似于<code>call *%gs:0x10</code>），而至于跳过去的代码是int还是sysenter就是Linux决定的了。 问了下实验室的学长，好像不是我理解的那样。他说glibc.so相关的代码只负责跳转（类似于call *%gs:0x10），而至于跳过去的代码是int还是sysenter就是Linux决定的了。

]]> http://techblog.iamzellux.com/2010/01/force-int-0x80-for-syscall/comment-page-1/#comment-277 zellux Mon, 08 Mar 2010 01:57:32 +0000 http://techblog.iamzellux.com/?p=62453#comment-277 我猜应该还是通过sysenter指令做了系统调用吧，不知道这个测试里SEP flag是怎么禁的。因为我觉得<code>call *%gs:0x10</code>调用的还是linux-gate.so里面的sysenter相关的代码。 我猜应该还是通过sysenter指令做了系统调用吧，不知道这个测试里SEP flag是怎么禁的。因为我觉得call *%gs:0x10调用的还是linux-gate.so里面的sysenter相关的代码。

]]> http://techblog.iamzellux.com/2010/01/force-int-0x80-for-syscall/comment-page-1/#comment-272 Zhongshu Sat, 06 Mar 2010 04:05:51 +0000 http://techblog.iamzellux.com/?p=62453#comment-272 Even if you do not have sep flags enabled on cpu，call *%gs:0x10 can still get the correct result. Is the dispatch job done by linux kernel or glibc? Even if you do not have sep flags enabled on cpu，call *%gs:0×10 can still get the correct result. Is the dispatch job done by linux kernel or glibc?

]]>