2 ms·
oh? on a recent glibc: $ objdump -D /lib/libc.so.6 | grep 'int[[:space:]]*$0x80' | wc -l 447 what were you thinking they used instead? sysenter? iirc, thi
by dododo 16y ago
oh? on a recent glibc:
$ objdump -D /lib/libc.so.6 | grep 'int[[:space:]]*$0x80' | wc -l
447
what were you thinking they used instead? sysenter? iirc, this turns out to be slower than "int $0x80."
- Locke1689 16y agoI was also trying to be Intel/AMD ISA independent. The Intel is SYSENTER, the AMD is SYSCALL. He's right though, I probably would have used SYSENTER in production code. You probably want to use int $0x80 in shellcode, though (fewer save registers).
- rwmj 16y agoOn i386 perhaps, but on modern 64 bit machines like the one in the example code above it'll be using sysenter or another method. $ objdump -D /lib64/libc.so.6 | grep 'int[[:space:]]+$0x80' | wc -l 0