File: syscall.S

package info (click to toggle)
radare2 0.9.6-3.1%2Bdeb8u1
  • links: PTS, VCS
  • area: main
  • in suites: jessie
  • size: 17,496 kB
  • ctags: 45,959
  • sloc: ansic: 240,999; sh: 3,645; makefile: 2,520; python: 1,212; asm: 312; ruby: 214; awk: 209; perl: 188; lisp: 169; java: 23; xml: 17; php: 6
file content (67 lines) | stat: -rw-r--r-- 994 bytes parent folder | download | duplicates (4)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
.code32
.global	process_syscall, len_shcode

# th0rpe - 08-27-2007

process_syscall:

#ifdef LISTENER_TCP
#include "listeners/lis_socket_tcp.S"
#else
/* for testing you must compile with 'test_srv.c' */
#include "listeners/getsock.S"
#endif

# save connection descriptor
	pushl %ebx

# alloc space for syscalls packet
	subl $2048, %esp

# write buffer address
write_buffer:
	movl %esp, %ecx

	movl %esp, (%ecx)
	movl $4, %edx
	movl %edx, %eax
	int $0x80

read_request:
	# read request
	movl %esp, %ecx
	movl $2048, %edx
	movl $3, %eax
	int $0x80

	# check minimal length
	cmpl $32,%eax
	jl err_process

	# exec syscall
	popal
exec_syscall:
	int $0x80

	# restore stack pointer
	subl $32, %esp

	# save eax result
	movl %eax, 28(%esp)

# write response
	movl %esp, %ecx
	movl $2048, %edx
# restore ebx register with connecion descriptor
	movl 2048(%esp), %ebx
	movl $4, %eax
	int $0x80

jmp read_request

err_process:
	movl $0xfc,%eax
	int $0x80

len_shcode:
	.long len_shcode - process_syscall