3 ms·

There is a high chance that it will crash your system. - Unlocked access to ->comm - What if buf is less than 6 bytes or not NULL terminated? - Only searchin

There is a high chance that it will crash your system. - Unlocked access to ->comm - What if buf is less than 6 bytes or not NULL terminated? - Only searching for sys_close() is not enough, it will also find any function pointer to sys_close() and then return a false syscall table. Anyway, a nice hack. :-)

Lai0chee 12y ago
BTW: Thanks for downvoting this.
- mrrrgn 12y ago
  Not sure who downvoted; but I appreciated the suggestions! Someone submitted a patch with the changes and I merged it a few hours ago. Thank you! :)