-
-
[旧帖]
[求助][求助]多核cpu指令hook的安全
0.00雪花
-
-
[旧帖] [求助][求助]多核cpu指令hook的安全
0.00雪花
最近看到多核hook安全的问题，在驱动里面如果hook多条指令会碰到其他cpu读取指令读到中间某条指令的问题，用hot patch办法，hook函数开头的mov edi,edi执行短跳再长跳的话相对比较安全一点，但是看到这篇文章：
52fK9s2c8@1M7q4)9K6b7g2)9J5c8W2)9J5c8X3#2K6L8i4k6H3M7#2)9J5k6h3y4G2L8g2)9J5c8X3u0D9L8$3N6K6i4K6u0r3K9$3g2J5L8X3g2D9L8i4g2K6N6r3q4J5k6q4)9J5c8X3q4J5j5$3S2A6N6X3g2Q4x3V1j5J5x3o6l9#2i4K6u0r3x3o6c8Q4x3V1j5J5y4g2)9J5c8U0b7@1y4o6p5K6i4K6u0W2j5i4y4H3P5q4)9J5y4X3&6T1M7%4m8Q4x3@1u0Q4x3U0k6F1j5Y4y4H3i4K6y4n7i4K6t1$3L8X3u0K6M7q4)9K6b7W2)9J5y4X3&6T1M7%4m8Q4x3@1u0Q4x3U0k6F1j5Y4y4H3i4K6y4n7i4K6t1$3L8X3u0K6M7q4)9K6b7W2!0q4z5g2)9^5y4#2)9^5b7#2!0q4z5g2)9&6c8q4!0m8x3W2!0q4y4W2)9&6b7#2)9^5z5g2!0q4y4g2)9^5c8W2!0m8y4g2!0q4z5q4!0m8c8W2)9&6c8q4!0q4c8W2!0n7b7#2)9&6b7h3W2@1i4K6t1%4M7#2)9J5y4X3&6T1M7%4m8Q4x3@1u0S2L8s2y4G2i4K6t1$3L8X3u0K6M7q4)9K6b7W2y4y4f1q4)9J5k6s2y4S2k6X3g2Q4x3V1y4Q4x3U0k6F1j5Y4y4H3i4K6y4n7j5$3q4#2M7$3g2Q4x3U0k6F1j5Y4y4H3i4K6y4n7b7#2m8g2i4K6t1$3L8X3u0K6M7q4)9K6b7Y4N6A6L8r3I4Q4x3U0k6F1j5Y4y4H3i4K6y4n7M7X3g2Q4x3X3c8J5k6h3q4V1i4K6t1$3L8X3u0K6M7q4)9K6b7X3W2F1M7%4c8J5N6h3y4@1K9h3!0F1i4K6t1$3L8X3u0K6M7q4)9K6b7Y4N6Z5k6h3&6Q4x3U0k6F1j5Y4y4H3i4K6y4n7K9i4c8Q4x3U0k6F1j5Y4y4H3i4K6y4n7k6r3g2@1k6h3y4@1M7#2)9J5y4X3&6T1M7%4m8Q4x3@1u0S2i4K6t1$3L8X3u0K6M7q4)9K6b7Y4N6J5K9i4c8W2i4K6t1$3L8X3u0K6M7q4)9K6b7Y4c8G2i4K6t1$3L8X3u0K6M7q4)9K6b7X3q4F1P5g2)9J5y4X3&6T1M7%4m8Q4x3@1u0G2k6W2)9J5y4X3&6T1M7%4m8Q4x3@1u0@1K9r3g2Q4x3U0k6F1j5Y4y4H3i4K6y4n7K9h3&6K6N6s2u0#2j5%4c8A6L8$3&6Q4x3U0k6F1j5Y4y4H3i4K6y4n7j5Y4W2@1k6i4y4Q4x3U0k6F1j5Y4y4H3i4K6y4n7N6$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`.
[培训]内核驱动高级班，冲击BAT一流互联网大厂工作，每周日13:00-18:00直播授课
