[openbeos] Re: R5 stuff... (bis)

This is all cool and stuff (props, Francois), but why would this
be on topic, here? 

><html><div style='background-color:'><DIV>
><P>François, </P>
><P>wow! this is great news!</P>
><P>keep up the good work</P>
><P>peter<BR><BR></P></DIV>
><DIV></DIV>
><DIV></DIV>&gt;From: François Revol <REVOL@xxxxxxx>
><DIV></DIV>&gt;Reply-To: openbeos@xxxxxxxxxxxxx 
><DIV></DIV>&gt;To: openbeos@xxxxxxxxxxxxx 
><DIV></DIV>&gt;Subject: [openbeos] R5 stuff... (bis) 
><DIV></DIV>&gt;Date: Sun, 28 Jul 2002 16:48:50 +0200 (MEST) 
><DIV></DIV>&gt; 
><DIV></DIV>&gt;Ok, another exploit and I explain: 
><DIV></DIV>&gt; 
><DIV></DIV>&gt; 
><DIV></DIV>&gt;[revol@patrick /boot/home/devel/mmap]$ ./mmtest2 
><DIV></DIV>&gt;libmoreposix:_init() 
><DIV></DIV>&gt;__init_mmap_stuff(): mmap_driver_fd = 3 
><DIV></DIV>&gt;open(/boot/home/testret, O_RDONLY)) 
><DIV></DIV>&gt;mmap(00000000, 4096, 00000004, 00000001, 4, 0) 
><DIV></DIV>&gt;func = mmap( PROT_READ|PROT_EXEC) 
><DIV></DIV>&gt;@func: 0x90, 0xc3, 0x90, 0xc3 
><DIV></DIV>&gt;calling ! 
><DIV></DIV>&gt;returned from func ! 
><DIV></DIV>&gt; 
><DIV></DIV>&gt;libmoreposix:_fini() 
><DIV></DIV>&gt; 
><DIV></DIV>&gt;--- 
><DIV></DIV>&gt; 
><DIV></DIV>&gt;[revol@patrick /boot/home]$ listarea 1352|grep mmap 
><DIV></DIV>&gt;30281 mmap_user a0000000 1000 1000 0 0 0 
><DIV></DIV>&gt; 
><DIV></DIV>&gt; 
><DIV></DIV>&gt;What I did is I hacked the JBQ mmap driver a bit further, and 
>even did some 
><DIV></DIV>&gt;kernel H4cK1nG :) 
><DIV></DIV>&gt;because filedes in drivers are owned by kernel_team, not the 
>calling thread... 
><DIV></DIV>&gt; 
><DIV></DIV>&gt;I'll maybe write a newsletter article explaining in detail, 
>this is also 
><DIV></DIV>&gt;informative for OBOS btw... (there's sys_read() and user_read() 
>involved :) 
><DIV></DIV>&gt; 
><DIV></DIV>&gt;Of course this one isn't a full blown mmap(), as it doesn't 
>deal with 
><DIV></DIV>&gt;pages, only whole file :-( 
><DIV></DIV>&gt;But it still may help in the mean time. 
><DIV></DIV>&gt; 
><DIV></DIV>&gt;Also, looking at Plex86 sources (*grin*), it seems Linux can 
>mmap() device 
><DIV></DIV>&gt;drivers... I think we could include this behaviour too, either 
>using ioctl() 
><DIV></DIV>&gt;or a new entry in the driver_hook struct... but this is GE 
>stuff btw. 
><DIV></DIV>&gt; 
><DIV></DIV>&gt;François. 
><DIV></DIV>&gt; 
><DIV></DIV>&gt; 
><DIV></DIV></div><br clear=all><hr>Send and receive Hotmail on your mobile 
>device: <a href='http://g.msn.com/1HM1ENAU/c152??PI=44314'>Click 
>Here</a><br></html>
>
>

Other related posts: