Use of the PC value in interrupt/exception handlers
piyuskedia at gmail.com
Fri Aug 2 12:15:51 CEST 2013
In addition to previous mail we found that L4-microkernel checks the PC
value on stack against some kernel PC in page fault handler by looking at
the source code. Does anybody knows if there is more such cases?
On Fri, Aug 2, 2013 at 7:10 PM, Piyus Kedia <piyuskedia at gmail.com> wrote:
> Dear all,
> We are working on developing a dynamic binary translator for the kernel.
> Towards this, we wanted to confirm if the interrupted PC value pushed on
> stack by an interrupt/exception is used by the interrupt/exception
> handlers? For example, is the PC value compared against a fixed address to
> determine the handler behaviour (like Linux's page fault handler compares
> the faulting PC against an exception table, to allow functions like
> copy_from_user to fault).
> Basically, we are wondering if it is safe to replace the pushed PC value
> on stack by another value. This would be safe if the PC value is only used
> for returning from interrupt, or for reading contents at that PC address
> (e.g., to decode the instruction at current PC). It would be unsafe if the
> value of the address itself is meaningful to the handler.
> We found that in FreeBSD segment-not-present exception handler checks the
> trapped PC value against some fixed kernel PC by looking at the code,
> except that it is only used for debugging purposes. It would be nice if
> somebody could also confirm this.
-------------- next part --------------
An HTML attachment was scrubbed...
More information about the l4-hackers