PPT Slide

Replacing System Calls

foo:

...

call write

...

HIJACK_write:

Shadow RPC

return

patch:

jmp HIJACK_write

Code Patch

application

code

condor libc

libc

Hijacker: replaceFunction(write, HIJACK_write)

Previous slide

Next slide

Back to first slide

View graphic version