syscall_intercept

syscall_intercept copied to clipboard

How to place `intercept_hook_point*` pointers on thread local storge and actually use it?

1

I want to make these hooking function pointers to be placed on thread local storage, in order to selectively disable and enable hooking on individual thread. But change definition of...

hurryman2212

Workaround SYS_clone3 in Ubuntu 22.04

1

The GLIBC 2.35 in Ubuntu 22.04 uses SYS_clone3 to create threads, that seems to cause segfault in hook. I use the following workaround to force a fall back to SYS_clone....

StorWav

Undefined reference when trying to make

1

Hi I'm using cmake for syscall_intercept. Now, when I want to make, I get the following error: ``` [ 0%] Built target gen_ctags [ 0%] Built target check_whitespace [ 2%]...

sinashan

I'm ending up using a different approach for my use-case, but thought you might value this work. --- This change is [](https://reviewable.io/reviews/pmem/syscall_intercept/113)

xloem

aarch64 support

2

Hi, It seems the current code does not support aarch64 arch, at least the system call numbers are different. Am I understand it correctly? Are there any existing alternatives? Thanks.

sktzwhj

Add clone arguments to callback hooks

1

Forwards all arguments from clone to the parent and child hook functions. Additionally, allows the parent hook to set the returned PID if desired. Updates the clone test case to...

vancemiller

Add intercept hook after kernel syscall completes

2

This PR adds an additional `intercept_hook_point_post_kernel` hook to the API that allows users to register a function to be called after a system call has been executed by the kernel...

alberto-miranda

Cannot print backtrace after syscall interception

1

All backtrace functions are not working in the syscall overriden functions, e.g. ``` int backtrace(void **buffer, int size); ``` ``` #include std::cout

wujysh

Add syscall arguments to clone hooks

1

This PR adds the missing arguments to the `clone()` system call, so that their values can be inspected when interception hooks are called. In our case, this is useful to...

alberto-miranda

37 tests failed on Ubuntu 18.04

3

``` Running tests... Start 1: asm_pattern_nosyscall 1/40 Test #1: asm_pattern_nosyscall ..................***Exception: SegFault 0.08 sec Start 2: asm_pattern_pattern1 2/40 Test #2: asm_pattern_pattern1 ...................***Exception: SegFault 0.08 sec Start 3: asm_pattern_pattern2 3/40 Test...

glock42