Kubo Takehiro

Results 127 comments of Kubo Takehiro

I would add the following function `sql_quote` to escape single quotation marks in string values. Otherwise it causes [SQL injection](https://en.wikipedia.org/wiki/SQL_injection). As for SQL NULL: json string `"NULL"` -> `'NULL'` json...

@pantor Are you going to fix this issue? If no, may I do it?

> It's buried in the SO. Does this mean that `dlsym(RDTL_DEFAULT, "function_name")` returns `NULL`? > I can find the function in the SO via readelf, but the address doesn't match...

> Still, the address of rb_hash_key_str does not seem to be working as a handle for method replacement. Could you explain about this? `funchook_prepare` fails with an error? Otherwise, it...

@SlimSnow See https://github.com/gaffe23/linux-inject#caveat-about-ptrace. You may need to change your OS's setting. Otherwise run injector with root privilege. If you run it on ubuntu in docker, see https://stackoverflow.com/questions/42029834/gdb-in-docker-container-returns-ptrace-operation-not-permitted.

There are many possible reasons for a dlopen error. * Does the architecture of target process match that of the .so file? * The .so file is in a directory...

I have not tested the following. I hope it is correct. 1. Methods defined in .cpp files Possible. The second argument of `plthook_replace()` must be the corresponding [mangled name](https://en.wikipedia.org/wiki/Name_mangling#C++). ```c++...

I'm not sure about `RTLD_DEEPBIND` but I guess that it is possible. How about the following code? Well, I have not checked whether it works or not. ```c static void...

Does the library `libunity.so` export some symbols? If so, could you use `plthook_open_by_address()`? ```c #include #include plthook_t *plthook; // The following code is same with what plthook_open does on Android...

> Also, do I need to wait until the PLT entry for glBindBuffer for libunity.so is resolved? It depends on whether you use the fourth argument of `plthook_replace`. I recommend...