Skip to content

mnunberg/libmonkey

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

2 Commits
 
 
 
 
 
 
 
 
 
 
 
 
 
 

Repository files navigation

Hello.

I often find myself needing to do really odd and weird things
in order to avoid administrative overhead of 'fixing' a distro's
library, or installing multiple versions thereof.

Sometimes the actual task to be fixed is trivial, but it's difficult
to make the external library (or even binary) do what you want it
to do.

libmonkey will completely replace a function for you with another
function of your choosing.

The function must match the exact prototype of the old one, and should
return the same type of value as the old one.

Optionally you can obtain the machine code which formerly belonged
to the 'pristine' original function, for later analysis.

This currently only works on ia32/amd64 architectures with the ELF
format and linux/glibc (it's possible it can work on other platforms
supporting ELF, but I doubt that).

See the Makefile and test_inject.c for example usage

DEBUGGING

You can get libmonkey to output more verbose information by setting
LIBMONKEY_DEBUG in the environment. The number should be a numeric
value. The higher the value, the more information is displayed

LIMITATIONS

- The physical code size of the old function must be at least 12 bytes
(for amd64 platforms) or 5 bytes (for i386).

- If the victim binary was compiled with optimizations, it is possible
that the compiler may have entirely inlined the function for various
invocations. This means that control is never transferred to the
victim's actual address.

- M. Nunberg

About

Dynamic Runtime Binary Monkey Patching (ELF/glibc)

Resources

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published

Languages