Skip to content
GitLab
Projects Groups Snippets
  • /
  • Help
    • Help
    • Support
    • Community forum
    • Submit feedback
    • Contribute to GitLab
  • Sign in / Register
  • D dynamorio
  • Project information
    • Project information
    • Activity
    • Labels
    • Members
  • Repository
    • Repository
    • Files
    • Commits
    • Branches
    • Tags
    • Contributors
    • Graph
    • Compare
  • Issues 1,467
    • Issues 1,467
    • List
    • Boards
    • Service Desk
    • Milestones
  • Merge requests 44
    • Merge requests 44
  • CI/CD
    • CI/CD
    • Pipelines
    • Jobs
    • Schedules
  • Deployments
    • Deployments
    • Environments
    • Releases
  • Packages and registries
    • Packages and registries
    • Package Registry
    • Infrastructure Registry
  • Monitor
    • Monitor
    • Incidents
  • Analytics
    • Analytics
    • Value stream
    • CI/CD
    • Repository
  • Wiki
    • Wiki
  • Snippets
    • Snippets
  • Activity
  • Graph
  • Create a new issue
  • Jobs
  • Commits
  • Issue Boards
Collapse sidebar
  • DynamoRIO
  • dynamorio
  • Issues
  • #1646
Closed
Open
Issue created Mar 27, 2015 by Derek Bruening@derekbrueningContributor

with DR in parent and child, add consistency for code changed via IPC

Code modification via IPC is a longstanding open issue (cases 68/204553 and 8321/212756 in our old tracker in case there are references in the code). Today we just log some of the actions (e.g., "WARNING: ProtectVirtualMemory called on process xxx" or the IPC_ALERT macros). We're talking about remote NtProtectVirtualMemory, NtWriteVirtualMemory, etc. on Windows: we're not trying to handle code changed via the kernel's debugger interface.

For DR in the parent it would be possible to notify the child DR about the code change. Probably we'd use a nudge, and we'd have the parent check the child drmarker first to avoid nudging native processes.

Assignee
Assign to
Time tracking