About hacking libc

[Xinyang Ge]

On Mon, Jun 17, 2013 at 2:39 PM, Carlos O'Donell
<carlos@systemhalted.org> wrote:
> On Mon, Jun 17, 2013 at 10:33 AM, Xinyang Ge <xxg113@cse.psu.edu> wrote:
>> Thanks all. Does anyone know if there is a unified way to catch up all
>> open-like library calls?
>
> Define "all"? All libraries calls from the user's application or all
> open calls including those from inside the library?
>
> If the former, yes, just preload a shared library.
>
> If the latter, no, but possible with something like System Tap.
>
> I would be more than happy to see someone work on userspace system tap
> probe points for all syscalls.
>
> Such a probe point would catch everything from within the library in a
> unified way.
>
> Cheers,
> Carlos.

I mean all library calls that will ultimately call sys_open.
Intercepting open library call is not enough because, as you know,
there are more functions like fopen which would also call sys_open.

Thanks,
Xinyang

--
Xinyang GE
Department of Computer Science & Engineering
The Pennsylvania State University
Homepage: http://www.cse.psu.edu/~xxg113/