Re: Obtaining non-exported symbol from kernel on runtime (without the debug symbols)
site_archiver@lists.apple.com Delivered-To: darwin-kernel@lists.apple.com Dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:received:received:message-id:date:from:to :subject:cc:in-reply-to:mime-version:content-type :content-transfer-encoding:content-disposition:references; bh=UQydoebTA19oN/xKVjWU42O37PTmQSCoi5MJr3l1KSQ=; b=eB9pSo17cYOdK77p6Gfd6211BBDb1as3rFFUxlKU4iNrsc7pJAE5Wuh4T5LwHVqG5k PCuOKP8rPV5yUT9o8S5xfr9oZ75085GIIkk89Lk8XS+GtU5wb5+Q0h/Ffth5bF66G8MF BfdEGCw23DGMDXSPCP2JgZJnrL4UynLbgQ7Fs= Domainkey-signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=message-id:date:from:to:subject:cc:in-reply-to:mime-version :content-type:content-transfer-encoding:content-disposition :references; b=am6NSCCzhJQPRzaxf/CqyQ2B+FM2Lvbm1YvBIVZKr2BQzDMOGYUxdhXBzovKcVPlqk X+4QVsFrilM4Zl/+7zLvIQ/fkY2mz7zYrCHh34YSZsEmg7yWSHan595DTN6H0THkJ768 oC/oyfL1njX2icz9AyBv5L3tiNFju3Y2VPZe4= That's just messed up. This is a KEXT, I can't force people to rebuild the kernel or patch it right away. I guess I will have to search memory with a function hash of sorts, but seems like a hack. I don't know why Apple decided to stop exporting some really useful API (namely some kauth and proc functions), plus restricting access to proc structure definitions by providing a crippled public one. My KEXT project is related with collecting statistics of processes so the non exported API is a bummer. John. On Sat, Dec 13, 2008 at 5:35 AM, Michael Smith <drivers@mu.org> wrote:
On Dec 12, 2008, at 8:15 PM, John D. wrote:
I'm working on a college project and I would like to access some non-exported API. For example chgproccnt and kld_file_lookupsymbol. I want to be able to obtain a symbol address from a kernel extension, say, of the mach_kernel file. This could come handy but apparently none of the useful API is available to extensions. Has anyone done anything similar or can provide a suggestion to access kld_file_lookupsymbol() without using static addresses (to avoid version-specific builds, since Apple can change it anytime).
You will need to build your own kernel.
= Mike
_______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-kernel mailing list (Darwin-kernel@lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-kernel/site_archiver%40lists.a... This email sent to site_archiver@lists.apple.com
participants (1)
-
John D.