Re:Using ARM Inline Assembly and Naked Functions to Fool Dis...
by evilsocket on Wednesday May 06, 2015 @06:52AM
(#9497702)
good point although the post is just a simple PoC ... to fool the kind of behaviour you're talking about, one could simply install a signal handler, call the fake function, handle the sigsegv or whatever, and then use the function as data ... also, since ARM instrutions are 4 bytes each, you could play with 3 bytes declaration ... funny things happen ;)
Another possibility could be blind reliance on debug information that's causing it to think that symbol is a function; strip the binary and try again.