April 2005 - Darwin-kernel - lists.apple.com

RE: String compare
by Quinn 11 Apr '05

11 Apr '05

site_archiver(a)lists.apple.com Delivered-To: darwin-kernel(a)lists.apple.com -- _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-kernel mailing list (Darwin-kernel(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-kernel/site_archiver%40lists.… This email sent to site_archiver(a)lists.apple.com

1 0

Re: how to tell which symbols are exported?
by Sam Vaughan 10 Apr '05

10 Apr '05

site_archiver(a)lists.apple.com Delivered-To: darwin-kernel(a)lists.apple.com % find /System/Library/Extensions/System.kext/PlugIns \ -type f -a ! -name "*.plist" | xargs nm | grep physio Sam On Fri, 8 Apr 2005, Andrew Gallatin <gallatin(a)cs.duke.edu> wrote: I there a tool to get a list of all the symbols that each of the loaded kernel extensions are exporting on a given system? Thanks, ("`-''-/").___..--''"`-._ Sam Vaughan `6_ 6 ) `-. ( ).`-.__.`) (_Y_.)' ._ ) `._ `. ``-..-' samvaughan(a)mac.com _..`--'_..-_/ /--'_.' ,' __________________________(il),-'' (li),' ((!.-' _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-kernel mailing list (Darwin-kernel(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-kernel/site_archiver%40lists.… When you build an xnu kernel, the .exports files in xnu/config/ are used to create the fake symbols in System.kext. If you add symbols to a debug kernel that you want to access from within your kext, you need to add them to the appropriate .exports file(s), otherwise kextload will fail. You also can't assume that just because a symbol is in /mach_kernel, it'll be listed in System.kext and available to you. I usually run the following grep over the binaries in System.kext to determine if I'll be able to use a particular kernel symbol from inside a kext. In this example, the function physio(): Background: I'm sitting at a shell prompt, trying to kextload an older kext on a newer system. A symbol required for the kext, call it "foo", which used to be resolved by the dependancies listed in the kext's Info.plist in an older version of MacOSX no longer seems to be found by kextload. I know the symbols is still there, as nm /mach_kernel shows it. Ideally, I'll be able to update Info.plist with vi and go on my merry way.. Drew This email sent to site_archiver(a)lists.apple.com

1 0

Re: how to tell which symbols are exported?
by Andrew Gallatin 08 Apr '05

08 Apr '05

site_archiver(a)lists.apple.com Delivered-To: darwin-kernel(a)lists.apple.com Dean Reece writes: > On Apr 8, 2005, at 12:39, Andrew Gallatin wrote: > > I there a tool to get a list of all the symbols that each of the > > loaded kernel extensions are exporting on a given system? > > Only look at kexts with the OSBundleCompatibleVersion property - > those are the ones available as libraries. > > Use the 'nm' command on the binary in the kext. All of the symbols > that are "upper case" types are globals involved in linking - the > non-"U" symbols are the ones exported by the kext. You can disregard > the '_' prefix on the symbols - it is an artifact of the way linkage > works. Thanks.. The piece I was missing is that the "fake" extensions are (somehow) bundled in /System/Library/Extensions/System.kext/PlugIns and have actual Mach-o objects that I can run nm on. Sorry for the noise.. Drew _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-kernel mailing list (Darwin-kernel(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-kernel/site_archiver%40lists.… This email sent to site_archiver(a)lists.apple.com

1 0

Re: how to tell which symbols are exported?
by Dean Reece 08 Apr '05

08 Apr '05

site_archiver(a)lists.apple.com Delivered-To: darwin-kernel(a)lists.apple.com I there a tool to get a list of all the symbols that each of the loaded kernel extensions are exporting on a given system? Cheers, - Dean _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-kernel mailing list (Darwin-kernel(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-kernel/site_archiver%40lists.… On Apr 8, 2005, at 12:39, Andrew Gallatin wrote: Only look at kexts with the OSBundleCompatibleVersion property - those are the ones available as libraries. Use the 'nm' command on the binary in the kext. All of the symbols that are "upper case" types are globals involved in linking - the non-"U" symbols are the ones exported by the kext. You can disregard the '_' prefix on the symbols - it is an artifact of the way linkage works. Background: I'm sitting at a shell prompt, trying to kextload an older kext on a newer system. A symbol required for the kext, call it "foo", which used to be resolved by the dependancies listed in the kext's Info.plist in an older version of MacOSX no longer seems to be found by kextload. I know the symbols is still there, as nm / mach_kernel shows it. Ideally, I'll be able to update Info.plist with vi and go on my merry way.. This email sent to site_archiver(a)lists.apple.com

1 0

how to tell which symbols are exported?
by Andrew Gallatin 08 Apr '05

08 Apr '05

site_archiver(a)lists.apple.com Delivered-To: darwin-kernel(a)lists.apple.com I there a tool to get a list of all the symbols that each of the loaded kernel extensions are exporting on a given system? Background: I'm sitting at a shell prompt, trying to kextload an older kext on a newer system. A symbol required for the kext, call it "foo", which used to be resolved by the dependancies listed in the kext's Info.plist in an older version of MacOSX no longer seems to be found by kextload. I know the symbols is still there, as nm /mach_kernel shows it. Ideally, I'll be able to update Info.plist with vi and go on my merry way.. Thanks, Drew _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-kernel mailing list (Darwin-kernel(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-kernel/site_archiver%40lists.… This email sent to site_archiver(a)lists.apple.com

1 0

RE: String compare
by Carl Smith 08 Apr '05

08 Apr '05

site_archiver(a)lists.apple.com Delivered-To: darwin-kernel(a)lists.apple.com Thread-index: AcU8aa16SREy7D1LRSiRXCsTchz+KwAAMhHg Thread-topic: String compare _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-kernel mailing list (Darwin-kernel(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-kernel/site_archiver%40lists.… This email sent to site_archiver(a)lists.apple.com

1 0

Re: String compare
by Shawn Erickson 08 Apr '05

08 Apr '05

site_archiver(a)lists.apple.com Delivered-To: darwin-kernel(a)lists.apple.com _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-kernel mailing list (Darwin-kernel(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-kernel/site_archiver%40lists.… This email sent to site_archiver(a)lists.apple.com

1 0

String compare
by Carl Smith 08 Apr '05

08 Apr '05

site_archiver(a)lists.apple.com Delivered-To: darwin-kernel(a)lists.apple.com Thread-index: AcU8ZxY90DzXCfZAR6W96Fe/+E7iTA== Thread-topic: String compare _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-kernel mailing list (Darwin-kernel(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-kernel/site_archiver%40lists.… This email sent to site_archiver(a)lists.apple.com

1 0

Remote debugging connection fails
by selvaganesan 08 Apr '05

08 Apr '05

site_archiver(a)lists.apple.com Delivered-To: darwin-kernel(a)lists.apple.com _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-kernel mailing list (Darwin-kernel(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-kernel/site_archiver%40lists.… This email sent to site_archiver(a)lists.apple.com

1 0

Re: dlil_inject_if_input
by Justin Walker 07 Apr '05

07 Apr '05

site_archiver(a)lists.apple.com Delivered-To: darwin-kernel(a)lists.apple.com On Apr 7, 2005, at 15:54, Carl Smith wrote: Of course every thing runs fine if I comment out the dlil_inject_if_input function call and the *m_orig = NULL; line. I have tried adjusting to where m->m_data points, like m->m_data - 14, No, 'inject' takes the args as is. get a crash. The documentation is pretty thin in this area, so any help or suggestions would greatly be appreciated. I think you will have to use gdb, or some really creative syslogs. Yes I have checked to make sure that pHeader and ifb->nfliter_id are pointer or contain the correct information. Huh? Cheers, Justin -- Justin C. Walker, Curmudgeon-At-Large Institute for General Semantics -------- Some people have a mental horizon of radius zero, and call it their point of view. -- David Hilbert -------- _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-kernel mailing list (Darwin-kernel(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-kernel/site_archiver%40lists.… Ok this is driving me crazy, as you probable know from my other messages I am filtering packets at the DLIL interface layer, my problem is that when ever I call dlil_inject_if_input my Mac crashes. You can, of course, use gdb to figure out where in the code the crash occurs: - use 2-machine debugging to catch the varmint in the act; - if you get a panic, the values printed either in the panic log or to the screen can be handed to gdb to get a stack trace. Then, you can track backwards with code in hand to figure out what is going wrong. This email sent to site_archiver(a)lists.apple.com

1 0