Monday, October 04, 2021

Re: Kernel dump and secure boot with KARL

Den tis 5 okt. 2021 kl 06:35 skrev Arka Sharma <arka.sw1988@gmail.com>:
> Also suppose we have a crash and dump is generated, how does KARL impact
> gdb when the core file is opened ?

It would not affect this at all.

It is exactly as hard or as easy to debug a core file from something
compiled with
cc -o bsd obj1.o obj2.o obj3.o
as with something compiled with
cc -o bsd obj2.o obj3.o obj1.o

The relinking is done so that exploit code that knows how to find an
address inside obj1 will not be able to jump into obj2 by taking the
obj1 address and adding 83743 bytes to it and expect to land at a
certain place in obj2. In the first case it would work, in the second
it would not.

--
May the most significant bit of your life be positive.

No comments:

Post a Comment