Hotpatching a C Function on x86

Re:Hotpatching a C Function on x86 by eb0la on Friday April 01, 2016 @07:10AM (#11404002)

Intesting. ms_hook_prologue inserts 1 8-byte instruction ( lea rsp,[rsp+0x0]) instead of 8 1-byte nops. It executes much faster than 8 nopts if the function is not patched (no need to decode 8 instructions).

[ Parent | on HN ]

Re:Hotpatching a C Function on x86 by kevincox on Friday April 01, 2016 @07:15AM (#11404022)

In the article it is also mentioned that it is important so that you can't have a thread that has "partially" executed your no-ops wen you replace it/them..

[ Parent | on HN ]