Re: [PATCH] kprobes for 2.5.50-bk2

From: Andi Kleen (ak@suse.de)
Date: Tue Dec 03 2002 - 07:56:05 EST


Dave Jones <davej@codemonkey.org.uk> writes:

> This last part just got me thinking.
> What stops someone for example using this to implement a binary
> only replacement of the TCP/IP stack, or any other part of the
> kernel for that matter ?

It can be already easily done, just patch the kernel code in /dev/kmem
and add some jump instructions to your loaded module.

But it's not practical, because it's 100% binary dependent and would
break with every small change.

Similar to kprobes. But kprobes is actually useful for kernel debugging/
tracing and unlike many other of these patches not very intrusive.

-Andi
-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.tux.org/lkml/



This archive was generated by hypermail 2b29 : Sat Dec 07 2002 - 22:00:16 EST