You have to locate the buggy function with objdump, and replace the whole function with a simple «return -EFAULT;» aka 0xb8f2ffffffc3.
Using objdump -j text on ecdh_generic.ko, there will be two interesting lines :
Idx Name Size VMA LMA File off Algn
1 .text 0000WXYZ 0000000000000000 0000000000000000 00000070 2**4
And
00000000000023e0 g F .text 000000000000016f ecc_gen_privkey
You will have to patch at address 0x70 + 0x23e0. And just overwrite the function first bytes with 0xb8f2ffffffc3. Then you will have a patched .ko file.
It's a really really really nasty way of patching this. But it works...
[^] # Re: Not in 4.15-RC5 yet
Posté par Pinaraf . En réponse au journal D'un kernel panic à un patch.... Évalué à 5.
Ok, you want the nasty one :)
You have to locate the buggy function with objdump, and replace the whole function with a simple «return -EFAULT;» aka 0xb8f2ffffffc3.
Using objdump -j text on ecdh_generic.ko, there will be two interesting lines :
And
You will have to patch at address 0x70 + 0x23e0. And just overwrite the function first bytes with 0xb8f2ffffffc3. Then you will have a patched .ko file.
It's a really really really nasty way of patching this. But it works...