Use zpoline to hook system call
Closed this issue · 1 comments
jserv commented
Programs that use inline system calls (such as using the syscall
directly) or those that statically link to glibc cannot utilize LDP_FUSE. This is because LD_PRELOAD
is not sufficient, as it can not fully hook into all system calls.
The zpoline falls under the category of binary rewriting. However, it's important to note that it doesn't overwrite your program's binary files. Instead, zpoline modifies the binary code in memory just before the program's main function begins. This means your original program files remain unchanged. zpoline offers reasonable speed, and integrating it with LDP_FUSE could be beneficial. Please consider this integration possibility.
sholtrop commented
Very cool! Will look into it