Tags: frida/frida-gum
Tags
gumjs: Commit NO_ACCESS pages in Memory.alloc
Memory.alloc(size, { protection: '---' }) went through gum_memory_
allocate(), which only reserves NO_ACCESS pages on Windows, so a
later Memory.protect() to a usable protection failed. Recommit them,
as gum_alloc_n_pages() used to.
darwin: Populate registry before interceptor The first gum_interceptor_obtain() activates the unwind broker, whose backend resolves libdyld through the module registry. Obtaining it before the snapshot re-entered an empty registry, crashing on a NULL module lookup. Snapshot the modules first, then start change tracking.
linux: Find musl RTLD call sites on disk Scanning live memory missed call sites a second GumModuleRegistry had already redirected, so it fell back to clobbering the tiny stub. Read the linker's on-disk image instead: the original instructions always survive there, and hooking the same loaded addresses lets the interceptors chain.
linux: Find musl RTLD call sites on disk Scanning live memory missed call sites a second GumModuleRegistry had already redirected, so it fell back to clobbering the tiny stub. Read the linker's on-disk image instead: the original instructions always survive there, and hooking the same loaded addresses lets the interceptors chain.
PreviousNext