【问题标题】:Function Interposing on OSX MavericksOSX Mavericks 上的函数插入
【发布时间】:2013-10-31 01:36:01
【问题描述】:

我完全按照这里网站上的说明进行操作

http://www.newosxbook.com/src.jl?tree=listings&file=4-5-interpose.c

这是该页面的代码

#include <stdio.h>
#include <unistd.h>
#include <fcntl.h>
#include <stdlib.h>
#include <malloc/malloc.h> // for malloc_printf()

// Note: Compile with GCC, not cc (important)
//
//
// This is the expected interpose structure
 typedef struct interpose_s { void *new_func;
                   void *orig_func; } interpose_t;
// Our prototypes - requires since we are putting them in 
//  the interposing_functions, below

void *my_malloc(int size); // matches real malloc()
void my_free (void *); // matches real free()

static const interpose_t interposing_functions[] \ 
    __attribute__ ((section("__DATA, __interpose"))) = {

 { (void *)my_free, (void *)free },
 { (void *)my_malloc, (void *)malloc } 

};

void *
my_malloc (int size) {
 // In our function we have access to the real malloc() -
 // and since we don’t want to mess with the heap ourselves,
 // just call it
 //
void *returned = malloc(size);
// call malloc_printf() because the real printf() calls malloc()
// // internally - and would end up calling us, recursing ad infinitum

  malloc_printf ( "+ %p %d\n", returned, size); return (returned);
}
void
my_free (void *freed) {
// Free - just print the address, then call the real free()


  malloc_printf ( "- %p\n", freed); free(freed);
}



#if 0
  From output 4-11:

 morpheus@Ergo(~)$ gcc -dynamiclib l.c -o libMTrace.dylib -Wall  // compile to dylib
 morpheus@Ergo(~)$ DYLD_INSERT_LIBRARIES=libMTrace.dylib ls     // force insert into ls
 ls(24346) malloc: + 0x100100020 88
 ls(24346) malloc: + 0x100800000 4096
 ls(24346) malloc: + 0x100801000 2160 
 ls(24346) malloc: - 0x100800000 
 ls(24346) malloc: + 0x100801a00 3312 ... // etc.

#endif

最新版本的 OSX 或此处编写的代码有什么不同吗?它似乎没有拦截任何东西。

【问题讨论】:

    标签: osx-mavericks function-interposition


    【解决方案1】:

    在 interposing_functions 定义前添加 attribute((used)) 即可,如下:

    // Note: Compile with GCC, not cc (important)
    //
    //
    // This is the expected interpose structure
     typedef struct interpose_s { void *new_func;
    			       void *orig_func; } interpose_t;
    // Our prototypes - requires since we are putting them in 
    //  the interposing_functions, below
    
    void *my_malloc(int size); // matches real malloc()
    void my_free (void *); // matches real free()
    
    __attribute__((used)) static const interpose_t interposing_functions[] \
        __attribute__ ((section("__DATA, __interpose"))) = {
    
     { (void *)my_free, (void *)free },
     { (void *)my_malloc, (void *)malloc } 
    
    };
    
    void *
    my_malloc (int size) {
    ....

    【讨论】:

      【解决方案2】:

      这不是 Mavericks 的特色,而是 clang 的特色。如果您使用来自同一网站的 jtool ,您会看到生成的 dylib 没有 _DATA._interpose,这是 DYLD 发挥插入魔法所必需的。

      顺便说一句,最好在该书自己的论坛中提出这个问题。这可能就是它的用途。

      【讨论】: