lorenz.stechauner/BSc-Thesis
1
0
Fork 0
Code Activity

thesis: Last fixes

Browse Source
This commit is contained in:
Lorenz Stechauner
2025-08-24 18:09:36 +02:00
parent 5016718283
commit cb08e67d89
2 changed files with 3 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
thesis/src/01.introduction.tex
View File

@@ -50,7 +50,7 @@ But generally, the process places the system call number and its arguments in de
Then the kernel executes the requested operation and places the return value inside another register, and lastly hands the execution back to the process.
\cite[Chapter~10]{linuxkernel}
Intercepting calls to system calls allows one to see the system call number, arguments, and return value.
Intercepting system calls allows one to see the system call number, arguments, and return value.
One has to keep in mind, that many system-related functionalities are not, in fact, translated to system calls one-to-one.
For example, \texttt{malloc}~\cite{malloc.3} has no dedicated system call, it is managed by the C standard library internally.
Many system calls have corresponding wrapper functions in the C standard library (like \texttt{open}, \texttt{close}, \texttt{sem\_wait}).

4
thesis/src/02.intercept.tex
View File

@@ -216,7 +216,7 @@ However, one must be aware that, not only function calls inside the targeted bin
During the research on different approaches to intercepting system and function calls,
it has been found, that the most reliable way to achieve the goals of this work (see Section~\ref{sec:motivation-and-goal}) is to intercept function calls instead of system calls.
This is because---as long as the programs to test are dynamically linked---, intercepting function calls allows one to intercept many more calls and in a more flexible way.
This is because---as long as the programs to test are dynamically linked---intercepting function calls allows one to intercept many more calls and in a more flexible way.
Therefore, from now on this work only considers function calls and no system calls directly.
In this work, preloading (see Subsection~\ref{subsec:preloading}) was chosen to be used
@@ -464,7 +464,7 @@ These other environment variables are described in the following:
It is a list separated by commas, colons, or semicolons.
Wildcards (\texttt{*}) at the end of function names are possible.
A prefix of \texttt{-} indicates that the following function should not be intercepted.
Example: \texttt{*,-sem\_} intercepts all functions except those which start with \texttt{sem\_}.
Example: \texttt{*,-sem\_*} intercepts all functions except those which start with \texttt{sem\_}.
By default, all (implemented) functions are intercepted.
\item[\texttt{INTERCEPT\_LIBRARIES}]
This variable is used to specify which libraries' function calls should be intercepted.