簡體   English   中英

在Linux中沒有ptrace的情況下在C中讀取另一個進程的內存

[英]Reading memory of another process in C without ptrace in linux

我正在嘗試讀取另一個進程的內存並打印內存中的任何內容(堆和/或堆棧)。 我有內存地址的使用范圍/proc我已經提取的地址范圍內像這樣 現在我想像定義的那樣讀取其他進程的內存范圍。

5569032d2000-5569032f3000 rw-p 00000000 00:00 0 [堆]

我被困在如何訪問這些內存地址上。 我嘗試了如下所示的方法,但沒有多大幫助。

int main(int argc, char *argv[]) {

off_t offset = strtoul(argv[1], NULL, 0);
size_t len = strtoul(argv[2], NULL, 0);

// Truncate offset to a multiple of the page size, or mmap will fail.
size_t pagesize = sysconf(_SC_PAGE_SIZE);
off_t page_base = (offset / pagesize) * pagesize;
off_t page_offset = offset - page_base;

int fd = open("/dev/mem", O_SYNC);
unsigned char *mem = mmap(NULL, page_offset + len, PROT_READ | PROT_WRITE, MAP_PRIVATE, fd, page_base);
if (mem == MAP_FAILED) {
    perror("Can't map memory");
    return -1;
}

size_t i;
for (i = 0; i < len; ++i)
    printf("%x ", (int)mem[page_offset + i]);
//size_t i;
return 0;}

謝謝。

我正在為我的嵌入式系統制作調試工具。 我無法使用ptrace()因為它在嘗試查看設備內存時會停止正在運行的進程。

我想通讀另一個進程的進程,我可以使用process_vm_readv()函數如下:


pid_t pid; // Put value of pid in this
void *remotePtr; // Put starting address 
size_t bufferLength; // Put size of buffer in this, aka size to read
// Build iovec structs
    struct iovec local[1];
    local[0].iov_base = calloc(bufferLength, sizeof(char));
    local[0].iov_len = bufferLength;

    struct iovec remote[1];
    remote[0].iov_base = remotePtr;
    remote[0].iov_len = bufferLength;

/*Nread will contain amount of bytes of data read*/

nread = process_vm_readv(pid, local, 2, remote, 1, 0); 
    if (nread < 0) {
        switch (errno) {
        case EINVAL:
            printf("ERROR: INVALID ARGUMENTS.\n");
            break;
        case EFAULT:
            printf
                ("ERROR: UNABLE TO ACCESS TARGET MEMORY ADDRESS.\n");
            break;
        case ENOMEM:
            printf("ERROR: UNABLE TO ALLOCATE MEMORY.\n");
            break;
        case EPERM:
            printf
                ("ERROR: INSUFFICIENT PRIVILEGES TO TARGET PROCESS.\n");
            break;
        case ESRCH:
            printf("ERROR: PROCESS DOES NOT EXIST.\n");
            break;
        default:
            printf("ERROR: AN UNKNOWN ERROR HAS OCCURRED.\n");
        }

        return -1;
    }
/* To print the read data */
printf("The read text is \n %s\n", local[0].iov_base);

暫無
暫無

聲明:本站的技術帖子網頁,遵循CC BY-SA 4.0協議,如果您需要轉載,請注明本站網址或者原文地址。任何問題請咨詢:yoyou2525@163.com.

 
粵ICP備18138465號  © 2020-2024 STACKOOM.COM