September 2017
Beginner to intermediate
290 pages
6h 58m
English
There's nothing special to say here. This section contains only one structure--this_module, which is mostly filled with zeroes (as it is used by the LKM loader internally) except three fields:
These fields, in the case of this kernel version and this Linux distro, are located at offsets 0x18, 0x150, and 0x248, respectively; therefore, the code would be as follows:
section '.gnu.linkonce.this_module' writeablethis_module: ; Reserve 0x18 bytes rb 0x18 ; String representation of the name of the module db 'simple_module',0 ; Reserve bytes till the offset 0x150 rb 0x150 - ($ - this_module) ...
Read now
Unlock full access