2022-08-05 10:17:01

by Borislav Petkov

[permalink] [raw]
Subject: Re: [PATCH] scripts/decodecode: add the ability to find code sequence

On Thu, Aug 04, 2022 at 04:46:16PM -0500, Can Sun wrote:
> It adds a tool to search code sequence from vmlinux. If additional
> parameters (vmlinux and kernel build path) are provided to decodecode
> command, it will try to search the code sequence in the binary, and
> provide a code block surrounding the target.

The use case being?

objdump -d vmlinux and searching for the rIP is too much typing?

Besides, with the kernel being more and more runtime-patched and
rewritten, the live code differs more and more from the actual compiled
opcode bytes in vmlinux, as you noticed yourself with restoredcode
below.

So maybe I'm missing some important use case but right now this looks
pointless to me.

Thx.

--
Regards/Gruss,
Boris.

SUSE Software Solutions Germany GmbH
GF: Ivo Totev, Andrew Myers, Andrew McDonald, Martje Boudien Moerman
(HRB 36809, AG Nürnberg)