PPT Slide
Restarting (Hijacking)
ckpt lib
checkpoint
file
restart
process
Again, a restart process is started.
The ckpt library is dynamically loaded at an
arbitrary address.
0x8000
0x6000
0x4000
Previous slide
Next slide
Back to first slide
View graphic version