mirror of
https://github.com/h3xduck/TripleCross.git
synced 2025-12-24 10:23:08 +08:00
New diagrams, completed rootkit architecture
This commit is contained in:
h3xduck
@@ -1,4 +1,4 @@
|
||||
This is pdfTeX, Version 3.14159265-2.6-1.40.21 (TeX Live 2020/Debian) (preloaded format=pdflatex 2022.4.27) 11 JUN 2022 22:19
|
||||
This is pdfTeX, Version 3.14159265-2.6-1.40.21 (TeX Live 2020/Debian) (preloaded format=pdflatex 2022.4.27) 12 JUN 2022 08:16
|
||||
entering extended mode
|
||||
restricted \write18 enabled.
|
||||
%&-line parsing enabled.
|
||||
@@ -1210,7 +1210,7 @@ Overfull \hbox (0.50073pt too wide) in paragraph at lines 43--44
|
||||
|
||||
[3]) (./chapters/chapter2.tex [4]
|
||||
Chapter 2.
|
||||
<images//classic_bpf.jpg, id=736, 588.1975pt x 432.61626pt>
|
||||
<images//classic_bpf.jpg, id=738, 588.1975pt x 432.61626pt>
|
||||
File: images//classic_bpf.jpg Graphic file (type jpg)
|
||||
<use images//classic_bpf.jpg>
|
||||
Package pdftex.def Info: images//classic_bpf.jpg used on input line 20.
|
||||
@@ -1218,35 +1218,35 @@ Package pdftex.def Info: images//classic_bpf.jpg used on input line 20.
|
||||
[5
|
||||
|
||||
] [6 <./images//classic_bpf.jpg>]
|
||||
<images//cbpf_prog.jpg, id=757, 403.5075pt x 451.6875pt>
|
||||
<images//cbpf_prog.jpg, id=759, 403.5075pt x 451.6875pt>
|
||||
File: images//cbpf_prog.jpg Graphic file (type jpg)
|
||||
<use images//cbpf_prog.jpg>
|
||||
Package pdftex.def Info: images//cbpf_prog.jpg used on input line 55.
|
||||
(pdftex.def) Requested size: 227.62204pt x 254.80415pt.
|
||||
[7 <./images/cBPF_prog.jpg>]
|
||||
<images//bpf_instructions.png, id=769, 380.92313pt x 475.27562pt>
|
||||
<images//bpf_instructions.png, id=771, 380.92313pt x 475.27562pt>
|
||||
File: images//bpf_instructions.png Graphic file (type png)
|
||||
<use images//bpf_instructions.png>
|
||||
Package pdftex.def Info: images//bpf_instructions.png used on input line 96.
|
||||
(pdftex.def) Requested size: 227.62204pt x 283.99998pt.
|
||||
<images//bpf_address_mode.png, id=773, 417.05812pt x 313.67188pt>
|
||||
<images//bpf_address_mode.png, id=775, 417.05812pt x 313.67188pt>
|
||||
File: images//bpf_address_mode.png Graphic file (type png)
|
||||
<use images//bpf_address_mode.png>
|
||||
Package pdftex.def Info: images//bpf_address_mode.png used on input line 105.
|
||||
(pdftex.def) Requested size: 227.62204pt x 171.19905pt.
|
||||
[8] [9 <./images//bpf_instructions.png> <./images//bpf_address_mode.png>]
|
||||
<images//tcpdump_example.png, id=788, 534.99875pt x 454.69875pt>
|
||||
<images//tcpdump_example.png, id=790, 534.99875pt x 454.69875pt>
|
||||
File: images//tcpdump_example.png Graphic file (type png)
|
||||
<use images//tcpdump_example.png>
|
||||
Package pdftex.def Info: images//tcpdump_example.png used on input line 117.
|
||||
(pdftex.def) Requested size: 284.52756pt x 241.82869pt.
|
||||
<images//cBPF_prog_ex_sol.png, id=791, 242.9075pt x 321.2pt>
|
||||
<images//cBPF_prog_ex_sol.png, id=793, 242.9075pt x 321.2pt>
|
||||
File: images//cBPF_prog_ex_sol.png Graphic file (type png)
|
||||
<use images//cBPF_prog_ex_sol.png>
|
||||
Package pdftex.def Info: images//cBPF_prog_ex_sol.png used on input line 128.
|
||||
(pdftex.def) Requested size: 170.71652pt x 225.74026pt.
|
||||
[10 <./images//tcpdump_example.png>]
|
||||
<images//ebpf_arch.jpg, id=804, 739.76375pt x 472.76625pt>
|
||||
<images//ebpf_arch.jpg, id=806, 739.76375pt x 472.76625pt>
|
||||
File: images//ebpf_arch.jpg Graphic file (type jpg)
|
||||
<use images//ebpf_arch.jpg>
|
||||
Package pdftex.def Info: images//ebpf_arch.jpg used on input line 167.
|
||||
@@ -1282,7 +1282,7 @@ Overfull \hbox (13.5802pt too wide) in paragraph at lines 351--381
|
||||
[]
|
||||
|
||||
[17]
|
||||
<images//xdp_diag.jpg, id=895, 649.42625pt x 472.76625pt>
|
||||
<images//xdp_diag.jpg, id=897, 649.42625pt x 472.76625pt>
|
||||
File: images//xdp_diag.jpg Graphic file (type jpg)
|
||||
<use images//xdp_diag.jpg>
|
||||
Package pdftex.def Info: images//xdp_diag.jpg used on input line 404.
|
||||
@@ -1293,7 +1293,7 @@ Overfull \hbox (5.80417pt too wide) in paragraph at lines 460--472
|
||||
[]
|
||||
|
||||
[20] [21] [22] [23]
|
||||
<images//libbpf_prog.jpg, id=951, 543.02875pt x 502.87875pt>
|
||||
<images//libbpf_prog.jpg, id=953, 543.02875pt x 502.87875pt>
|
||||
File: images//libbpf_prog.jpg Graphic file (type jpg)
|
||||
<use images//libbpf_prog.jpg>
|
||||
Package pdftex.def Info: images//libbpf_prog.jpg used on input line 570.
|
||||
@@ -1320,25 +1320,25 @@ BPF and CAP_NET_ADMIN,
|
||||
[]
|
||||
|
||||
[26] [27]
|
||||
<images//mem_arch_pages.jpg, id=1000, 593.21625pt x 434.62375pt>
|
||||
<images//mem_arch_pages.jpg, id=1002, 593.21625pt x 434.62375pt>
|
||||
File: images//mem_arch_pages.jpg Graphic file (type jpg)
|
||||
<use images//mem_arch_pages.jpg>
|
||||
Package pdftex.def Info: images//mem_arch_pages.jpg used on input line 709.
|
||||
(pdftex.def) Requested size: 369.88582pt x 271.00914pt.
|
||||
[28 <./images//mem_arch_pages.jpg>]
|
||||
<images//mem_major_page_fault.jpg, id=1008, 639.38875pt x 425.59pt>
|
||||
<images//mem_major_page_fault.jpg, id=1010, 639.38875pt x 425.59pt>
|
||||
File: images//mem_major_page_fault.jpg Graphic file (type jpg)
|
||||
<use images//mem_major_page_fault.jpg>
|
||||
Package pdftex.def Info: images//mem_major_page_fault.jpg used on input line 7
|
||||
19.
|
||||
(pdftex.def) Requested size: 312.9803pt x 208.32661pt.
|
||||
<images//mem_minor_page_fault.jpg, id=1010, 654.445pt x 555.07375pt>
|
||||
<images//mem_minor_page_fault.jpg, id=1012, 654.445pt x 555.07375pt>
|
||||
File: images//mem_minor_page_fault.jpg Graphic file (type jpg)
|
||||
<use images//mem_minor_page_fault.jpg>
|
||||
Package pdftex.def Info: images//mem_minor_page_fault.jpg used on input line 7
|
||||
27.
|
||||
(pdftex.def) Requested size: 312.9803pt x 265.45834pt.
|
||||
<images//memory.jpg, id=1012, 310.15875pt x 569.12625pt>
|
||||
<images//memory.jpg, id=1014, 310.15875pt x 569.12625pt>
|
||||
File: images//memory.jpg Graphic file (type jpg)
|
||||
<use images//memory.jpg>
|
||||
Package pdftex.def Info: images//memory.jpg used on input line 738.
|
||||
@@ -1351,13 +1351,13 @@ buted within a pro-cess in the x86_64
|
||||
|
||||
[29 <./images//mem_major_page_fault.jpg>] [30 <./images//mem_minor_page_fault.j
|
||||
pg> <./images//memory.jpg>]
|
||||
<images//stack_pres.jpg, id=1025, 707.64375pt x 283.0575pt>
|
||||
<images//stack_pres.jpg, id=1027, 707.64375pt x 283.0575pt>
|
||||
File: images//stack_pres.jpg Graphic file (type jpg)
|
||||
<use images//stack_pres.jpg>
|
||||
Package pdftex.def Info: images//stack_pres.jpg used on input line 760.
|
||||
(pdftex.def) Requested size: 398.33858pt x 159.33606pt.
|
||||
[31 <./images//stack_pres.jpg>]
|
||||
<images//stack_ops.jpg, id=1036, 524.96124pt x 694.595pt>
|
||||
<images//stack_ops.jpg, id=1038, 524.96124pt x 694.595pt>
|
||||
File: images//stack_ops.jpg Graphic file (type jpg)
|
||||
<use images//stack_ops.jpg>
|
||||
Package pdftex.def Info: images//stack_ops.jpg used on input line 794.
|
||||
@@ -1368,19 +1368,19 @@ LaTeX Font Info: Trying to load font information for T1+txtt on input line 8
|
||||
(/usr/share/texlive/texmf-dist/tex/latex/txfonts/t1txtt.fd
|
||||
File: t1txtt.fd 2000/12/15 v3.1
|
||||
)
|
||||
<images//stack_before.jpg, id=1039, 712.6625pt x 315.1775pt>
|
||||
<images//stack_before.jpg, id=1041, 712.6625pt x 315.1775pt>
|
||||
File: images//stack_before.jpg Graphic file (type jpg)
|
||||
<use images//stack_before.jpg>
|
||||
Package pdftex.def Info: images//stack_before.jpg used on input line 804.
|
||||
(pdftex.def) Requested size: 398.33858pt x 176.16635pt.
|
||||
<images//stack.jpg, id=1040, 707.64375pt x 381.425pt>
|
||||
<images//stack.jpg, id=1042, 707.64375pt x 381.425pt>
|
||||
File: images//stack.jpg Graphic file (type jpg)
|
||||
<use images//stack.jpg>
|
||||
Package pdftex.def Info: images//stack.jpg used on input line 811.
|
||||
(pdftex.def) Requested size: 398.33858pt x 214.70816pt.
|
||||
[32] [33 <./images//stack_ops.jpg> <./images//stack_before.jpg>] [34 <./images
|
||||
//stack.jpg>]
|
||||
<images//stack_ret_hij_simple.jpg, id=1076, 774.895pt x 674.52pt>
|
||||
<images//stack_ret_hij_simple.jpg, id=1078, 774.895pt x 674.52pt>
|
||||
File: images//stack_ret_hij_simple.jpg Graphic file (type jpg)
|
||||
<use images//stack_ret_hij_simple.jpg>
|
||||
Package pdftex.def Info: images//stack_ret_hij_simple.jpg used on input line 8
|
||||
@@ -1398,12 +1398,12 @@ nput line 863.
|
||||
LaTeX Font Info: Font shape `T1/txtt/b/n' in size <10> not available
|
||||
(Font) Font shape `T1/txtt/bx/n' tried instead on input line 864.
|
||||
[35] [36 <./images//stack_ret_hij_simple.jpg>]
|
||||
<images//buffer_overflow.jpg, id=1097, 707.64375pt x 343.2825pt>
|
||||
<images//buffer_overflow.jpg, id=1099, 707.64375pt x 343.2825pt>
|
||||
File: images//buffer_overflow.jpg Graphic file (type jpg)
|
||||
<use images//buffer_overflow.jpg>
|
||||
Package pdftex.def Info: images//buffer_overflow.jpg used on input line 879.
|
||||
(pdftex.def) Requested size: 426.79134pt x 207.03964pt.
|
||||
<images//buffer_overflow_shellcode.jpg, id=1099, 707.64375pt x 379.4175pt>
|
||||
<images//buffer_overflow_shellcode.jpg, id=1101, 707.64375pt x 379.4175pt>
|
||||
File: images//buffer_overflow_shellcode.jpg Graphic file (type jpg)
|
||||
<use images//buffer_overflow_shellcode.jpg>
|
||||
Package pdftex.def Info: images//buffer_overflow_shellcode.jpg used on input l
|
||||
@@ -1419,7 +1419,7 @@ LaTeX Warning: Reference `TODO probably an Annex' on page 37 undefined on input
|
||||
LaTeX Warning: Reference `TODO' on page 38 undefined on input line 907.
|
||||
|
||||
[38 <./images//buffer_overflow_shellcode.jpg>]
|
||||
<images//ROPcompound.jpg, id=1115, 1296.845pt x 790.955pt>
|
||||
<images//ROPcompound.jpg, id=1117, 1296.845pt x 790.955pt>
|
||||
File: images//ROPcompound.jpg Graphic file (type jpg)
|
||||
<use images//ROPcompound.jpg>
|
||||
Package pdftex.def Info: images//ROPcompound.jpg used on input line 929.
|
||||
@@ -1434,13 +1434,13 @@ Overfull \hbox (28.45273pt too wide) in paragraph at lines 929--930
|
||||
LaTeX Warning: Reference `TODO' on page 40 undefined on input line 941.
|
||||
|
||||
[40 <./images//ROPcompound.jpg>]
|
||||
<images//frame.jpg, id=1135, 695.59875pt x 705.63625pt>
|
||||
<images//frame.jpg, id=1137, 695.59875pt x 705.63625pt>
|
||||
File: images//frame.jpg Graphic file (type jpg)
|
||||
<use images//frame.jpg>
|
||||
Package pdftex.def Info: images//frame.jpg used on input line 954.
|
||||
(pdftex.def) Requested size: 398.33858pt x 404.07954pt.
|
||||
[41 <./images//frame.jpg>]
|
||||
<images//tcp_conn.jpg, id=1150, 452.69125pt x 405.515pt>
|
||||
<images//tcp_conn.jpg, id=1152, 452.69125pt x 405.515pt>
|
||||
File: images//tcp_conn.jpg Graphic file (type jpg)
|
||||
<use images//tcp_conn.jpg>
|
||||
Package pdftex.def Info: images//tcp_conn.jpg used on input line 1002.
|
||||
@@ -1452,7 +1452,7 @@ e-quence of SYN, SYN+ACK,
|
||||
[]
|
||||
|
||||
[42] [43 <./images//tcp_conn.jpg>]
|
||||
<images//tcp_retransmission.jpg, id=1164, 523.9575pt x 485.815pt>
|
||||
<images//tcp_retransmission.jpg, id=1166, 523.9575pt x 485.815pt>
|
||||
File: images//tcp_retransmission.jpg Graphic file (type jpg)
|
||||
<use images//tcp_retransmission.jpg>
|
||||
Package pdftex.def Info: images//tcp_retransmission.jpg used on input line 101
|
||||
@@ -1483,7 +1483,7 @@ s a call to the func-tion timerfd_settime,
|
||||
[]
|
||||
|
||||
[45] [46]
|
||||
<images//sch_gdb_plt.png, id=1194, 1040.88875pt x 146.5475pt>
|
||||
<images//sch_gdb_plt.png, id=1196, 1040.88875pt x 146.5475pt>
|
||||
File: images//sch_gdb_plt.png Graphic file (type png)
|
||||
<use images//sch_gdb_plt.png>
|
||||
Package pdftex.def Info: images//sch_gdb_plt.png used on input line 1100.
|
||||
@@ -1493,7 +1493,7 @@ Overfull \hbox (14.22636pt too wide) in paragraph at lines 1100--1101
|
||||
[][]
|
||||
[]
|
||||
|
||||
<images//sch_gdb_got_prev.png, id=1195, 529.98pt x 39.14626pt>
|
||||
<images//sch_gdb_got_prev.png, id=1197, 529.98pt x 39.14626pt>
|
||||
File: images//sch_gdb_got_prev.png Graphic file (type png)
|
||||
<use images//sch_gdb_got_prev.png>
|
||||
Package pdftex.def Info: images//sch_gdb_got_prev.png used on input line 1107.
|
||||
@@ -1504,7 +1504,7 @@ Overfull \hbox (14.22636pt too wide) in paragraph at lines 1107--1108
|
||||
[][]
|
||||
[]
|
||||
|
||||
<images//sch_gdb_got_after.png, id=1199, 532.99126pt x 41.15375pt>
|
||||
<images//sch_gdb_got_after.png, id=1201, 532.99126pt x 41.15375pt>
|
||||
File: images//sch_gdb_got_after.png Graphic file (type png)
|
||||
<use images//sch_gdb_got_after.png>
|
||||
Package pdftex.def Info: images//sch_gdb_got_after.png used on input line 1116
|
||||
@@ -1515,7 +1515,7 @@ Overfull \hbox (14.22636pt too wide) in paragraph at lines 1116--1117
|
||||
[][]
|
||||
[]
|
||||
|
||||
<images//sch_glibc_func.png, id=1200, 585.18625pt x 89.33376pt>
|
||||
<images//sch_glibc_func.png, id=1202, 585.18625pt x 89.33376pt>
|
||||
File: images//sch_glibc_func.png Graphic file (type png)
|
||||
<use images//sch_glibc_func.png>
|
||||
Package pdftex.def Info: images//sch_glibc_func.png used on input line 1123.
|
||||
@@ -1566,7 +1566,7 @@ Overfull \hbox (3.09538pt too wide) in paragraph at lines 252--253
|
||||
[]
|
||||
|
||||
[57]
|
||||
<images//stack_scan_write_tech.jpg, id=1383, 829.0975pt x 315.1775pt>
|
||||
<images//stack_scan_write_tech.jpg, id=1385, 829.0975pt x 315.1775pt>
|
||||
File: images//stack_scan_write_tech.jpg Graphic file (type jpg)
|
||||
<use images//stack_scan_write_tech.jpg>
|
||||
Package pdftex.def Info: images//stack_scan_write_tech.jpg used on input line
|
||||
@@ -1582,7 +1582,7 @@ Overfull \hbox (28.45273pt too wide) in paragraph at lines 268--269
|
||||
LaTeX Warning: Reference `TODO' on page 59 undefined on input line 290.
|
||||
|
||||
[59] [60] [61]
|
||||
<images//tcp_exfiltrate_retrans.jpg, id=1436, 633.36626pt x 475.7775pt>
|
||||
<images//tcp_exfiltrate_retrans.jpg, id=1438, 633.36626pt x 475.7775pt>
|
||||
File: images//tcp_exfiltrate_retrans.jpg Graphic file (type jpg)
|
||||
<use images//tcp_exfiltrate_retrans.jpg>
|
||||
Package pdftex.def Info: images//tcp_exfiltrate_retrans.jpg used on input line
|
||||
@@ -1591,82 +1591,96 @@ Package pdftex.def Info: images//tcp_exfiltrate_retrans.jpg used on input line
|
||||
[62 <./images//tcp_exfiltrate_retrans.jpg>])
|
||||
(./chapters/chapter4.tex [63]
|
||||
Chapter 4.
|
||||
<images//rootkit.jpg, id=1445, 886.31125pt x 614.295pt>
|
||||
<images//rootkit.jpg, id=1448, 886.31125pt x 614.295pt>
|
||||
File: images//rootkit.jpg Graphic file (type jpg)
|
||||
<use images//rootkit.jpg>
|
||||
Package pdftex.def Info: images//rootkit.jpg used on input line 19.
|
||||
Package pdftex.def Info: images//rootkit.jpg used on input line 21.
|
||||
(pdftex.def) Requested size: 441.01772pt x 305.67511pt.
|
||||
|
||||
Overfull \hbox (14.22636pt too wide) in paragraph at lines 19--20
|
||||
Overfull \hbox (14.22636pt too wide) in paragraph at lines 21--22
|
||||
[][]
|
||||
[]
|
||||
|
||||
[64
|
||||
|
||||
]
|
||||
] [65 <./images//rootkit.jpg>] [66]
|
||||
<images//rootkit_files.jpg, id=1464, 568.1225pt x 462.72874pt>
|
||||
File: images//rootkit_files.jpg Graphic file (type jpg)
|
||||
<use images//rootkit_files.jpg>
|
||||
Package pdftex.def Info: images//rootkit_files.jpg used on input line 58.
|
||||
(pdftex.def) Requested size: 426.79134pt x 347.63174pt.
|
||||
LaTeX Font Info: Font shape `T1/txr/b/it' in size <12> not available
|
||||
(Font) Font shape `T1/txr/bx/it' tried instead on input line 65.
|
||||
|
||||
LaTeX Warning: Reference `TODO EVALUATION' on page 65 undefined on input line 3
|
||||
0.
|
||||
Overfull \hbox (11.29134pt too wide) in paragraph at lines 65--66
|
||||
[]\T1/txr/m/n/12 The pro-gram \T1/txr/bx/it/12 in-jec-tor \T1/txr/m/n/12 com-pr
|
||||
ises the rootkit client and the shared li-brary RawTCP_Lib.
|
||||
[]
|
||||
|
||||
<images//rop_evil_ebpf_1.jpg, id=1455, 789.95125pt x 395.4775pt>
|
||||
[67 <./images//rootkit_files.jpg>]
|
||||
|
||||
LaTeX Warning: Reference `TODO EVALUATION' on page 68 undefined on input line 8
|
||||
4.
|
||||
|
||||
<images//rop_evil_ebpf_1.jpg, id=1476, 789.95125pt x 395.4775pt>
|
||||
File: images//rop_evil_ebpf_1.jpg Graphic file (type jpg)
|
||||
<use images//rop_evil_ebpf_1.jpg>
|
||||
Package pdftex.def Info: images//rop_evil_ebpf_1.jpg used on input line 38.
|
||||
Package pdftex.def Info: images//rop_evil_ebpf_1.jpg used on input line 92.
|
||||
(pdftex.def) Requested size: 426.79134pt x 213.66933pt.
|
||||
[65 <./images//rootkit.jpg>]
|
||||
[68]
|
||||
|
||||
LaTeX Warning: Reference `TODO' on page 66 undefined on input line 46.
|
||||
LaTeX Warning: Reference `TODO' on page 69 undefined on input line 100.
|
||||
|
||||
[66 <./images//rop_evil_ebpf_1.jpg>]
|
||||
Overfull \hbox (4.42868pt too wide) in paragraph at lines 55--56
|
||||
[69 <./images//rop_evil_ebpf_1.jpg>]
|
||||
Overfull \hbox (4.42868pt too wide) in paragraph at lines 109--110
|
||||
\T1/txr/m/n/12 the orig-i-nal data later) and we pro-ceed to over-write the sta
|
||||
ck us-ing bpf_probe_write_user(),
|
||||
[]
|
||||
|
||||
<images//rop_evil_ebpf_2.jpg, id=1472, 789.95125pt x 395.4775pt>
|
||||
<images//rop_evil_ebpf_2.jpg, id=1492, 789.95125pt x 395.4775pt>
|
||||
File: images//rop_evil_ebpf_2.jpg Graphic file (type jpg)
|
||||
<use images//rop_evil_ebpf_2.jpg>
|
||||
Package pdftex.def Info: images//rop_evil_ebpf_2.jpg used on input line 59.
|
||||
Package pdftex.def Info: images//rop_evil_ebpf_2.jpg used on input line 113.
|
||||
(pdftex.def) Requested size: 426.79134pt x 213.66933pt.
|
||||
<images//rop_evil_ebpf_3.jpg, id=1475, 789.95125pt x 369.38pt>
|
||||
<images//rop_evil_ebpf_3.jpg, id=1495, 789.95125pt x 369.38pt>
|
||||
File: images//rop_evil_ebpf_3.jpg Graphic file (type jpg)
|
||||
<use images//rop_evil_ebpf_3.jpg>
|
||||
Package pdftex.def Info: images//rop_evil_ebpf_3.jpg used on input line 70.
|
||||
Package pdftex.def Info: images//rop_evil_ebpf_3.jpg used on input line 124.
|
||||
(pdftex.def) Requested size: 426.79134pt x 199.5693pt.
|
||||
[67 <./images//rop_evil_ebpf_2.jpg>] [68 <./images//rop_evil_ebpf_3.jpg>]
|
||||
[70 <./images//rop_evil_ebpf_2.jpg>] [71 <./images//rop_evil_ebpf_3.jpg>]
|
||||
|
||||
LaTeX Warning: Reference `table:aslr_offset' on page 69 undefined on input line
|
||||
93.
|
||||
LaTeX Warning: Reference `table:aslr_offset' on page 72 undefined on input line
|
||||
147.
|
||||
|
||||
<images//aslr_offset.jpg, id=1489, 597.23125pt x 273.02pt>
|
||||
<images//aslr_offset.jpg, id=1509, 597.23125pt x 273.02pt>
|
||||
File: images//aslr_offset.jpg Graphic file (type jpg)
|
||||
<use images//aslr_offset.jpg>
|
||||
Package pdftex.def Info: images//aslr_offset.jpg used on input line 98.
|
||||
Package pdftex.def Info: images//aslr_offset.jpg used on input line 152.
|
||||
(pdftex.def) Requested size: 369.88582pt x 169.0915pt.
|
||||
[69 <./images//aslr_offset.jpg>]
|
||||
Overfull \hbox (0.26146pt too wide) in paragraph at lines 121--122
|
||||
[72 <./images//aslr_offset.jpg>]
|
||||
Overfull \hbox (0.26146pt too wide) in paragraph at lines 175--176
|
||||
[]\T1/txr/m/n/12 This tech-nique works both in com-pil-ers with low hard-en-ing
|
||||
fe-tau-res by de-fault (Clang)
|
||||
[]
|
||||
|
||||
|
||||
Overfull \hbox (38.05193pt too wide) in paragraph at lines 125--127
|
||||
Overfull \hbox (38.05193pt too wide) in paragraph at lines 179--181
|
||||
\T1/txr/m/n/12 We load and at-tach a tra-ce-point eBPF pro-gram at the \T1/txr/
|
||||
m/it/12 en-ter \T1/txr/m/n/12 po-si-tion of syscall sys_timerfd_settime.
|
||||
[]
|
||||
|
||||
<images//sch_firstcall.png, id=1501, 643.40375pt x 91.34125pt>
|
||||
<images//sch_firstcall.png, id=1521, 643.40375pt x 91.34125pt>
|
||||
File: images//sch_firstcall.png Graphic file (type png)
|
||||
<use images//sch_firstcall.png>
|
||||
Package pdftex.def Info: images//sch_firstcall.png used on input line 135.
|
||||
Package pdftex.def Info: images//sch_firstcall.png used on input line 189.
|
||||
(pdftex.def) Requested size: 369.88582pt x 52.51244pt.
|
||||
[70]) (./chapters/chapter5.tex [71 <./images//sch_firstcall.png>]
|
||||
[73]) (./chapters/chapter5.tex [74 <./images//sch_firstcall.png>]
|
||||
Chapter 5.
|
||||
) (./chapters/chapter6.tex [72
|
||||
) (./chapters/chapter6.tex [75
|
||||
|
||||
]
|
||||
Chapter 6.
|
||||
) [73
|
||||
) [76
|
||||
|
||||
]
|
||||
Overfull \hbox (5.34976pt too wide) in paragraph at lines 338--338
|
||||
@@ -1674,7 +1688,7 @@ Overfull \hbox (5.34976pt too wide) in paragraph at lines 338--338
|
||||
/ yir -[] cyber -[] threats -[]
|
||||
[]
|
||||
|
||||
[74
|
||||
[77
|
||||
|
||||
|
||||
]
|
||||
@@ -1695,7 +1709,7 @@ Overfull \hbox (21.24973pt too wide) in paragraph at lines 338--338
|
||||
mmit _ 2015feb20 .
|
||||
[]
|
||||
|
||||
[75]
|
||||
[78]
|
||||
Overfull \hbox (9.14975pt too wide) in paragraph at lines 338--338
|
||||
\T1/txtt/m/n/12 ch02 . xhtml# :-[]: text = With % 20JIT % 20compiled % 20code %
|
||||
2C % 20i ,[] %20other %
|
||||
@@ -1707,7 +1721,7 @@ Overfull \hbox (6.49615pt too wide) in paragraph at lines 338--338
|
||||
022), [On-line]. Avail-able: [][]$\T1/txtt/m/n/12 https :
|
||||
[]
|
||||
|
||||
[76]
|
||||
[79]
|
||||
Overfull \hbox (0.76683pt too wide) in paragraph at lines 338--338
|
||||
[]\T1/txr/m/n/12 ^^P Bpf next ker-nel tree.^^Q (), [On-line]. Avail-able: [][]
|
||||
$\T1/txtt/m/n/12 https : / / kernel . googlesource .
|
||||
@@ -1719,7 +1733,7 @@ Overfull \hbox (14.49278pt too wide) in paragraph at lines 338--338
|
||||
12 . [On-line]. Avail-able: [][]$\T1/txtt/m/n/12 http : / / manpages .
|
||||
[]
|
||||
|
||||
[77]
|
||||
[80]
|
||||
Overfull \hbox (9.33742pt too wide) in paragraph at lines 338--338
|
||||
\T1/txr/m/n/12 Avail-able: [][]$\T1/txtt/m/n/12 https : / / events19 . linuxfou
|
||||
ndation . org / wp -[] content / uploads /
|
||||
@@ -1767,7 +1781,7 @@ Overfull \hbox (4.29944pt too wide) in paragraph at lines 338--338
|
||||
2), [On-line]. Avail-able: [][]$\T1/txtt/m/n/12 https :
|
||||
[]
|
||||
|
||||
[78]
|
||||
[81]
|
||||
Overfull \hbox (6.53491pt too wide) in paragraph at lines 338--338
|
||||
[]\T1/txr/m/n/12 H. Sidh-pur-wala. ^^P Hard-en-ing elf bi-na-ries us-ing re-lo
|
||||
-ca-tion read-only (relro).^^Q (Jan. 28,
|
||||
@@ -1797,7 +1811,7 @@ Overfull \hbox (39.98859pt too wide) in paragraph at lines 338--338
|
||||
il-able: [][]$\T1/txtt/m/n/12 https : / / raw . githubusercontent .
|
||||
[]
|
||||
|
||||
[79] (./chapters/annex.tex [80]
|
||||
[82] (./chapters/annex.tex [83]
|
||||
(/usr/share/texlive/texmf-dist/tex/latex/listings/lstlang1.sty
|
||||
File: lstlang1.sty 2020/03/24 1.8d listings language file
|
||||
)
|
||||
@@ -1822,9 +1836,6 @@ l.346 \end{document}
|
||||
|
||||
LaTeX Warning: There were undefined references.
|
||||
|
||||
|
||||
LaTeX Warning: Label(s) may have changed. Rerun to get cross-references right.
|
||||
|
||||
Package rerunfilecheck Info: File `document.out' has not changed.
|
||||
(rerunfilecheck) Checksum: 9BD1500B472001DFE82F052359B713F2;5573.
|
||||
Package logreq Info: Writing requests to 'document.run.xml'.
|
||||
@@ -1832,11 +1843,11 @@ Package logreq Info: Writing requests to 'document.run.xml'.
|
||||
|
||||
)
|
||||
Here is how much of TeX's memory you used:
|
||||
29206 strings out of 481209
|
||||
465378 string characters out of 5914747
|
||||
1628288 words of memory out of 5000000
|
||||
45111 multiletter control sequences out of 15000+600000
|
||||
459242 words of font info for 106 fonts, out of 8000000 for 9000
|
||||
29225 strings out of 481209
|
||||
465746 string characters out of 5914747
|
||||
1630185 words of memory out of 5000000
|
||||
45121 multiletter control sequences out of 15000+600000
|
||||
462257 words of font info for 109 fonts, out of 8000000 for 9000
|
||||
36 hyphenation exceptions out of 8191
|
||||
88i,12n,90p,1029b,3721s stack positions out of 5000i,500n,10000p,200000b,80000s
|
||||
{/usr/share/texlive/texmf-dist/fonts/enc/dvips/base/8r.enc}</usr/share/texliv
|
||||
@@ -1849,11 +1860,12 @@ hare/texlive/texmf-dist/fonts/type1/public/txfonts/t1xtt.pfb></usr/share/texliv
|
||||
e/texmf-dist/fonts/type1/urw/helvetic/uhvb8a.pfb></usr/share/texlive/texmf-dist
|
||||
/fonts/type1/urw/helvetic/uhvr8a.pfb></usr/share/texlive/texmf-dist/fonts/type1
|
||||
/urw/helvetic/uhvr8a.pfb></usr/share/texlive/texmf-dist/fonts/type1/urw/times/u
|
||||
tmb8a.pfb></usr/share/texlive/texmf-dist/fonts/type1/urw/times/utmr8a.pfb></usr
|
||||
/share/texlive/texmf-dist/fonts/type1/urw/times/utmri8a.pfb>
|
||||
Output written on document.pdf (101 pages, 2400365 bytes).
|
||||
tmb8a.pfb></usr/share/texlive/texmf-dist/fonts/type1/urw/times/utmbi8a.pfb></us
|
||||
r/share/texlive/texmf-dist/fonts/type1/urw/times/utmr8a.pfb></usr/share/texlive
|
||||
/texmf-dist/fonts/type1/urw/times/utmri8a.pfb>
|
||||
Output written on document.pdf (104 pages, 2487727 bytes).
|
||||
PDF statistics:
|
||||
2008 PDF objects out of 2073 (max. 8388607)
|
||||
549 named destinations out of 1000 (max. 500000)
|
||||
787 words of extra memory for PDF output out of 10000 (max. 10000000)
|
||||
2036 PDF objects out of 2073 (max. 8388607)
|
||||
554 named destinations out of 1000 (max. 500000)
|
||||
792 words of extra memory for PDF output out of 10000 (max. 10000000)
|
||||
|
||||
|
||||
Reference in New Issue
Block a user