We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
There was an error while loading. Please reload this page.
1 parent 3a5b8a3 commit dd0d835Copy full SHA for dd0d835
entrypoint.sh
@@ -1,6 +1,5 @@
1
#!/bin/bash
2
echo "export PATH=$PATH:/root/corescripts" >> /root/.bashrc
3
-echo "set auto-load safe-path /" >> /root/.gdbinit
4
5
# sleep forever
6
tail -f /dev/null
exp/banzi.c
@@ -636,29 +636,29 @@ uint64_t page_to_physic(uint64_t page) {
636
*
637
*/
638
639
-__attribute__((naked)) pid_t __clone(uint64_t flags, void *dest)
640
-{
641
- __asm__ __volatile__(
642
- ".intel_syntax noprefix;\n"
643
- "mov r15, rsi;\n"
644
- "xor rsi, rsi;\n"
645
- "xor rdx, rdx;\n"
646
- "xor r10, r10;\n"
647
- "xor r9, r9;\n"
648
- "mov rax, 56;\n"
649
- "syscall;\n"
650
- "cmp rax, 0;\n"
651
- "jl bad_end;\n"
652
- "jg good_end;\n"
653
- "jmp r15;\n"
654
- "bad_end:\n"
655
- "neg rax;\n"
656
- "ret;\n"
657
- "good_end:\n"
658
659
- ".att_syntax prefix;\n"
660
- );
661
-}
+// __attribute__((naked)) pid_t __clone(uint64_t flags, void *dest)
+// {
+// __asm__ __volatile__(
+// ".intel_syntax noprefix;\n"
+// "mov r15, rsi;\n"
+// "xor rsi, rsi;\n"
+// "xor rdx, rdx;\n"
+// "xor r10, r10;\n"
+// "xor r9, r9;\n"
+// "mov rax, 56;\n"
+// "syscall;\n"
+// "cmp rax, 0;\n"
+// "jl bad_end;\n"
+// "jg good_end;\n"
+// "jmp r15;\n"
+// "bad_end:\n"
+// "neg rax;\n"
+// "ret;\n"
+// "good_end:\n"
+// ".att_syntax prefix;\n"
+// );
+// }
662
663
int rootfd[2];
664
struct timespec timer = {.tv_sec = 1000000000, .tv_nsec = 0};
exp/page.py
@@ -0,0 +1,23 @@
+virtual_base = 0xffff888000000000
+vmemmap_base = 0xffffea0000000000
+def virtual_to_page(virtual):
+ page_cnt = (virtual - virtual_base) // 0x1000
+ page = page_cnt*0x40 + vmemmap_base
+ return page
7
+
8
+def page_to_virtual(page):
9
+ page_cnt = (page - vmemmap_base) // 0x40
10
+ virtual_addr = virtual_base + page_cnt * 0x1000
11
+ return virtual_addr
12
13
+def virtual_to_ptes(addr):
14
+ offset = addr & (2**12-1)
15
+ addr = addr >> 12
16
+ o4 = addr & (2**9-1)
17
+ addr = addr >> 9
18
+ o3 = addr & (2**9 -1)
19
20
+ o2 = addr & (2**9-1)
21
22
+ o1 = addr & (2**9-1)
23
+ return 8*o1, 8*o2, 8*o3, 8*o4, offset
AltStyle によって変換されたページ (->オリジナル) / アドレス: モード: デフォルト 音声ブラウザ ルビ付き 配色反転 文字拡大 モバイル
0 commit comments