search for: ptrace

http://bugzilla.mindrot.org/show_bug.cgi?id=745 Summary: agent-ptrace.sh fails Product: Portable OpenSSH Version: -current Platform: All OS/Version: OSF/1 Status: NEW Severity: normal Priority: P2 Component: Build system AssignedTo: openssh-bugs at mindrot.org ReportedBy:...

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi! I''m running htb on an 2.4.20 with the linux-2.4.20-ptrace.patch and now the messages in my syslog changed. specially, what is net-pf-14? I didn''t change anything else, just applied the patch and installed the kernel Mar 20 15:33:54 stovokor kernel: HTB: quantum of class 10001 is big. Consider r2q change.<4>HTB: quantum of class 10010 is...

I was wondering if the following attack would be feasible once I'm able to break into rlimit sandbox. Because sandboxed process that handles unauthenticated session is running as the 'sshd' user I was wondering if this could be used to jump between processes using ptrace(2). For example if I find a bug in the code executed before authentication I could use ptrace(2) to attach to another unprivileged processes running with the same credentials as I am. If I understand correctly this sandbox process is responsible for extracting credentials of the connecting user fro...

Hi, for ia64, I''d like to add xc_domain_setdebugging() in the xenctrl API. This patch implements it and modifies xc_ptrace.c to use it. The rationnal is enabling debugging tool not based on the ptrace API. The ptrace API is based on Linux ptrace which (at least on ia64) doesn''t have many privilegied registers. I''d prefer this patch being integrated on xen-ia64-unstable tree but we need the OK from n...

..." diff --git a/arch/um/include/irq_kern.h b/arch/um/include/irq_kern.h index 4f77559..de23a86 100644 --- a/arch/um/include/irq_kern.h +++ b/arch/um/include/irq_kern.h @@ -6,8 +6,8 @@ #ifndef __IRQ_KERN_H__ #define __IRQ_KERN_H__ -#include "linux/interrupt.h" -#include "asm/ptrace.h" +#include <linux/interrupt.h> +#include <asm/ptrace.h> extern int um_request_irq(unsigned int irq, int fd, int type, irq_handler_t handler, diff --git a/arch/um/include/line.h b/arch/um/include/line.h index 1223f2c..9d712b6 100644 --- a/arch/um/include/line.h +++ b/arch...

..." diff --git a/arch/um/include/irq_kern.h b/arch/um/include/irq_kern.h index 4f77559..de23a86 100644 --- a/arch/um/include/irq_kern.h +++ b/arch/um/include/irq_kern.h @@ -6,8 +6,8 @@ #ifndef __IRQ_KERN_H__ #define __IRQ_KERN_H__ -#include "linux/interrupt.h" -#include "asm/ptrace.h" +#include <linux/interrupt.h> +#include <asm/ptrace.h> extern int um_request_irq(unsigned int irq, int fd, int type, irq_handler_t handler, diff --git a/arch/um/include/line.h b/arch/um/include/line.h index 1223f2c..9d712b6 100644 --- a/arch/um/include/line.h +++ b/arch...

The patch below fixes the recent UML compilation failure in -rc5-mm1 without making the UML build reach further into the i386 headers. It splits the i386 ptrace.h and system.h into UML-usable and UML-unusable pieces. The string "abi" is in there because I did ptrace.h first, and that involves separating the ptrace ABI stuff from everything else (if pt_regs is not considered part of the abi). However, the system.h split is between random stuff...

The patch below fixes the recent UML compilation failure in -rc5-mm1 without making the UML build reach further into the i386 headers. It splits the i386 ptrace.h and system.h into UML-usable and UML-unusable pieces. The string "abi" is in there because I did ptrace.h first, and that involves separating the ptrace ABI stuff from everything else (if pt_regs is not considered part of the abi). However, the system.h split is between random stuff...

Attached is a simple patch to fix the return value from the 64-bit kernel when you call with a bad system call number with tracing enabled (for either ptrace or audit). What should happen is that the user process gets a -ENOSYS return call from the syscall; what actually happens (only in the 64-bit kernel) is that you get back the system call number. The 32-bit kernel does not suffer from this bug, and the pv-ops implementation in the upstream Linux k...

Hi. Mac OS X has a PT_DENY_ATTACH argument to ptrace(2) which does what it says on the tin: PT_DENY_ATTACH This request is the other operation used by the traced process; it allows a process that is not currently being traced to deny future traces by its parent. All other arguments are ignored. If the p...

...call or registering with certain device drivers. II. Problem Description Some mechanisms for causing a signal to be sent did not properly validate the signal number, in some cases allowing the kernel to attempt to deliver a negative or out-of-range signal number. Such errors were present in the ptrace(2) system call and the `spigot' video capture device driver. The error in ptrace(2) was introduced in FreeBSD version 4.2-RELEASE (4-STABLE dated Oct 26 04:34:41 2000 UTC). The `spigot' device driver (including the error) was introduced in FreeBSD 2.0.5. It has never been included in the...

...], 1, 100) = 0 poll([{fd=3, events=POLLIN}], 1, 100) = 0 poll([{fd=3, events=POLLIN, revents=POLLIN}], 1, 100) = 1 getsockopt(3, SOL_SOCKET, SO_TYPE, [1], [4]) = 0 accept(3, {sin_family=AF_INET, sin_port=htons(32992), sin_addr=inet_addr("192.168.200.201")}}, [16]) = 9 rt_sigtimedwait(ptrace: umoven: Input/output error [?], ptrace: umoven: Input/output error 0xffff, 0x80, -268442784) = 0 rt_sigtimedwait(ptrace: umoven: Input/output error [?], ptrace: umoven: Input/output error 0xffff, 0x8, -268442800) = 0 time(NULL) = 1047243022 kill(25894, SIGRT_0)...

Initially, was receiving the wine error when logging in... After applying the ptrace 'fix'... it sits there at 'connected'.... Anyone else experiencing this?

...is just after a release, but I'm trying to see how the regression tests look on Tru64. I hadn't had a chance to really look at them before because I didn't have sudo installed on Tru64 (now I do). Anyway, for the 3.9p1 release, all of them run except for a couple of problems: - agent-ptrace fails; it looks like setgid isn't enough to kill tracing under Tru64, and I can't find anything that looks like it will (like Linux's prctl). - reconfigure hangs; the script appears to get stuck in a loop. I tried turning on shell tracing; it looks like it is hanging when the sc...

...try apt-cache search strace On Jessie (I'm not running Ubuntu) I get: devscripts - scripts to make the life of a Debian Package maintainer easier dnstracer - trace DNS queries to the source ioapps - IO profiler and IO traces replayer netsniff-ng - Linux network packet sniffer toolkit python-ptrace - Python bindings for ptrace strace - System call tracer subversion-tools - Assorted tools related to Apache Subversion xtrace - trace communication between X client and server You should be able to find the appropriate package to install to get strace. -Thom

...ap layer should be ok. Thanks > > There are some accessories like copy_to_user_page() > copy_from_user_page() that could work and obviously defines to raw > memcpy on x86 (the main cons is they don't provide word granular > access) and at least on sparc they're tailored to ptrace assumptions > so then we'd need to evaluate what happens if this is used outside of > ptrace context. kmap has been used generally either to access whole > pages (i.e. copy_user_page), so ptrace may actually be the only use > case with subpage granularity access. > > #define c...

...intrinsics referring to them, only several different llvm.dbg.value calls. For most of them the DILocation match that of the inlined local variable, however some reference other code locations, e.g. places where these allocas are passed as function parameters. For example, in the attached IR file (ptrace.ll, generated from the attached ptrace.c) the following llvm.debug.value() calls reference the |siginfo| variable declared at line 888 in ptrace.c: %siginfo = alloca %struct.siginfo, align 8 call void @llvm.dbg.value(metadata %struct.siginfo* %siginfo, metadata !6801, metadata !DIExpression())...

...| 2 +- arch/um/include/skas/mode_kern_skas.h | 6 +- arch/um/include/skas/uaccess-skas.h | 2 +- arch/um/include/sysdep-i386/checksum.h | 4 +- arch/um/include/sysdep-i386/syscalls.h | 2 +- arch/um/include/sysdep-ppc/ptrace.h | 2 +- arch/um/include/sysdep-x86_64/checksum.h | 6 +- arch/um/include/tt/mode_kern_tt.h | 8 ++-- arch/um/include/tt/uaccess-tt.h | 12 ++-- arch/um/include/um_uaccess.h | 2 +- arch/um/kernel/exec...

...| 2 +- arch/um/include/skas/mode_kern_skas.h | 6 +- arch/um/include/skas/uaccess-skas.h | 2 +- arch/um/include/sysdep-i386/checksum.h | 4 +- arch/um/include/sysdep-i386/syscalls.h | 2 +- arch/um/include/sysdep-ppc/ptrace.h | 2 +- arch/um/include/sysdep-x86_64/checksum.h | 6 +- arch/um/include/tt/mode_kern_tt.h | 8 ++-- arch/um/include/tt/uaccess-tt.h | 12 ++-- arch/um/include/um_uaccess.h | 2 +- arch/um/kernel/exec...

...ill load the mapped BB from binary code. And keep doing it. I will create a table which record the entry address for each BB. Once the BB has been loaded by pervious instruction, I don't need load it again. That is why I want to grab the entry address of each BB. Actually, I tried to use API ptrace to implement the program I mentioned. It means I can set breakpionts at each entry of BB, once the program hits the break point, I can use ptrace to load the next BB to memory. However, I haven't done it by using ptrace. The reason is that I don't know how complex process ptrace did. So I r...