Every story and comment from the Hacker News API, in a layout borrowed from 2001.
A comment on Show HN: A simple, highly commented, rootkit which attacks GCC and Python.
- Unlocked access to ->comm
- What if buf is less than 6 bytes or not NULL terminated?
- Only searching for sys_close() is not enough, it will also find any function pointer to sys_close() and then return a false syscall table.
Anyway, a nice hack. :-)
- Unlocked access to ->comm
- What if buf is less than 6 bytes or not NULL terminated?
- Only searching for sys_close() is not enough, it will also find any function pointer to sys_close() and then return a false syscall table.
Anyway, a nice hack. :-)