armhook-core
armhook-core copied to clipboard
Core of Linux hooking engine for ARM architecture
I think you meant when the handler returns 0, not 1.
When BytesToSave failed to calculate. Can be easily fixed by replace allocation to stack, without "new".
Use syscall inside the target process instead of calling libc functions. This would have some benefits: - libc.so is no longer required in target process - execution time of target...
Warn the user when the function prolog contains relative branches or does a pc-relative memory access. In this case the program probably crashes when continuing the hooked function.