libdebug
libdebug copied to clipboard
DETACH + SEIZE
This afternoon, I was telling @MrIndeciso how the world would be better if PTRACE_INTERRUPT were available not only when PTRACE_SEIZE is used. Fewer limitations on signal hooking and fewer race conditions during the stop and wait of the process would make for a better world.
@MrIndeciso suggests the revolutionary idea that we could, MAYBE, implement a "PTRACEME + DETACH + SEIZE" mechanism and live in that magnificent world. Keep that in mind.
Interesting notes on a similar implementation here: https://shachaf.net/tmp/ptrace-notes.txt