diff --git a/thesis/src/01.introduction.tex b/thesis/src/01.introduction.tex index 4f1f001..392c8a2 100644 --- a/thesis/src/01.introduction.tex +++ b/thesis/src/01.introduction.tex @@ -50,7 +50,7 @@ But generally, the process places the system call number and its arguments in de Then the kernel executes the requested operation and places the return value inside another register, and lastly hands the execution back to the process. \cite[Chapter~10]{linuxkernel} -Intercepting calls to system calls allows one to see the system call number, arguments, and return value. +Intercepting system calls allows one to see the system call number, arguments, and return value. One has to keep in mind, that many system-related functionalities are not, in fact, translated to system calls one-to-one. For example, \texttt{malloc}~\cite{malloc.3} has no dedicated system call, it is managed by the C standard library internally. Many system calls have corresponding wrapper functions in the C standard library (like \texttt{open}, \texttt{close}, \texttt{sem\_wait}). diff --git a/thesis/src/02.intercept.tex b/thesis/src/02.intercept.tex index cdb4f33..53172c6 100644 --- a/thesis/src/02.intercept.tex +++ b/thesis/src/02.intercept.tex @@ -216,7 +216,7 @@ However, one must be aware that, not only function calls inside the targeted bin During the research on different approaches to intercepting system and function calls, it has been found, that the most reliable way to achieve the goals of this work (see Section~\ref{sec:motivation-and-goal}) is to intercept function calls instead of system calls. -This is because---as long as the programs to test are dynamically linked---, intercepting function calls allows one to intercept many more calls and in a more flexible way. +This is because---as long as the programs to test are dynamically linked---intercepting function calls allows one to intercept many more calls and in a more flexible way. Therefore, from now on this work only considers function calls and no system calls directly. In this work, preloading (see Subsection~\ref{subsec:preloading}) was chosen to be used @@ -464,7 +464,7 @@ These other environment variables are described in the following: It is a list separated by commas, colons, or semicolons. Wildcards (\texttt{*}) at the end of function names are possible. A prefix of \texttt{-} indicates that the following function should not be intercepted. - Example: \texttt{*,-sem\_} intercepts all functions except those which start with \texttt{sem\_}. + Example: \texttt{*,-sem\_*} intercepts all functions except those which start with \texttt{sem\_}. By default, all (implemented) functions are intercepted. \item[\texttt{INTERCEPT\_LIBRARIES}] This variable is used to specify which libraries' function calls should be intercepted.