3 ms·
How did you patch the kernel? Like how is that possible?
by nightowl_games 3y ago
How did you patch the kernel? Like how is that possible?
- userbinator 3y agoWith a hex editor, debugger, and skills that most developers these days seem to lack. I patched the kernel in memory first, using a kernel debugger, to verify my fix worked before editing the file on disk.
- mangamadaiyan 3y agoWindbg or SoftICE? :)
- userbinator 3y agoWindbg; it's free and doesn't require any setup to do this: https://learn.microsoft.com/en-us/windows-hardware/drivers/debugger/performing-local-kernel-debugging https://learn.microsoft.com/en-us/windows-hardware/drivers/d... (Working out how to patch such that I wouldn't crash the system if a process happens to call that API while it was in a half-modified state was also a fun problem...) I dug out the details on the bug I patched, and it isn't the same as this one; it's a race condition with timeouts on waiting for keyed events, which I believe isn't applicable in this situation as there are no timeouts.
- Iwan-Zotow 3y agoAren't kernel modules signed?
- runaum 3y agonot in xp, iirc, vista was the first release requiring it
- gorlilla 3y agoWindows xp and server 2003 sources (though incomplete AFAIR) were leaked back in 2020.
- mangamadaiyan 3y agoHere's an example showing how to patch a userspace binary: http://www.malsmith.net/blog/patching-closed-software/ http://www.malsmith.net/blog/patching-closed-software/ Note: not my blog. (Edit: removed a probably unnecessary, and likely inaccurate, detail). Patching the kernel would involve a similar (but slightly more complicated) process.