Mailing Lists: Apple Mailing Lists

Image of Mac OS face in stamp
 
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: Finding symbols in loaded kexts




On Aug 6, 2007, at 9:58 AM, Andrew Gallatin wrote:
Dean Reece writes:
If the symbol you want is not global (lower-case type specifier in
the nm output), or has been stripped out of the target kext entirely,
then there isn't really anything you can do.

If the symbol is not global, but still present, would it work to call it via a function pointer initialized to the correct address? Eg, does the "global" property mean anything once the module is relocated?

All that "global" means is that it's available to modules linking with it, in this context.


I vaguely remember a trick somebody here used to play with Linux.
There was some function that wasn't exported that his module needed to
call.  So he had a wrapper script for his module that groveled around
in kernel memory to find the function, then passed its address to his
module, which used it in a function pointer.  I don't remember if it
was global or non global though..

Yes, lots of people have done lots of bad and ugly things. Not a good reason to emulate them... 8)


 = Mike
_______________________________________________
Do not post admin requests to the list. They will be ignored.
Darwin-kernel mailing list      (email@hidden)
Help/Unsubscribe/Update your Subscription:
http://lists.apple.com/mailman/options/darwin-kernel/email@hidden

This email sent to email@hidden
References: 
 >Finding symbols in loaded kexts (From: Ryan Govostes <email@hidden>)
 >Re: Finding symbols in loaded kexts (From: Dean Reece <email@hidden>)
 >Re: Finding symbols in loaded kexts (From: Andrew Gallatin <email@hidden>)



Visit the Apple Store online or at retail locations.
1-800-MY-APPLE

Contact Apple | Terms of Use | Privacy Policy

Copyright © 2007 Apple Inc. All rights reserved.