Timeline for Insert a function call in an ELF executable
Current License: CC BY-SA 3.0
17 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| Apr 13, 2017 at 12:49 | history | edited | CommunityBot |
replaced http://reverseengineering.stackexchange.com/ with https://reverseengineering.stackexchange.com/
|
|
| Jul 19, 2016 at 5:16 | history | bumped | CommunityBot | This question has answers that may be good or bad; the system has marked it active so that they can be reviewed. | |
| Jun 19, 2016 at 4:58 | history | bumped | CommunityBot | This question has answers that may be good or bad; the system has marked it active so that they can be reviewed. | |
| May 20, 2016 at 4:51 | history | bumped | CommunityBot | This question has answers that may be good or bad; the system has marked it active so that they can be reviewed. | |
| Dec 22, 2015 at 22:53 | comment | added | Ta Thanh Dinh | You may try DynInst (which is actively developped), the following phrase in its document "... [Dyninst]... permit the insertion of code into a computer application that is either running or on disk (... known as static instrumentation...)" suggests that it can response to your need. | |
| Sep 22, 2015 at 23:44 | answer | added | jvoisin | timeline score: 1 | |
| Sep 22, 2015 at 11:59 | comment | added | sherlock |
Both relinject32 and relinject64 returns the following error: [WARNING] : profile_err() is NULL . Reverting to prinf. [E] Unable to copy PLT
|
|
| Sep 22, 2015 at 11:33 | comment | added | sherlock | Thanks! I have compiler ERESI. So far, I haven't been able to figure out what is going on here: eresi-project.org/browser/trunk/testsuite/elf/etrel_inject/…. Any insight? | |
| Sep 22, 2015 at 10:36 | comment | added | w s | @Holmes.Sherlock As far as I understand what __unbounded means it shouldn't affect the functionality. As far as I understand it is not supported anyway, which means that if you want to keep the source intact, you may try to use older versions of gcc. | |
| Sep 22, 2015 at 10:14 | comment | added | sherlock | @Dillinur No, the code does not reside in the binary. | |
| Sep 22, 2015 at 10:14 | comment | added | sherlock | @ws Yes, it works fine with __unbounded deleted. But, does that affect the functionality anyway? | |
| Sep 22, 2015 at 9:40 | comment | added | w s | OK, I built it on ubuntu 14.04. The only issue I encountered was usage of word __unbounded in entry.c which ( word __unbounded) can be freely removed without any problem. | |
| Sep 22, 2015 at 9:26 | comment | added | w s | would you post the link to your compilation issues ? | |
| Sep 22, 2015 at 9:14 | comment | added | user2823000 | I don't understand if the function you want to call is already in the binary or not, and/or if you want to modify just one binary or to design a generic way to do it. I'd say you could just create a new section manually, drop your code in it (and the first few instructions of OEP), and put a JMP at the OEP. | |
| Sep 22, 2015 at 6:23 | history | edited | perror | CC BY-SA 3.0 |
Better usage of the wiki syntax
|
| Sep 22, 2015 at 4:03 | review | First posts | |||
| Sep 22, 2015 at 5:33 | |||||
| Sep 22, 2015 at 3:52 | history | asked | sherlock | CC BY-SA 3.0 |