Sign Up to our social questions and Answers Engine to ask questions, answer people’s questions, and connect with other people.
Login to our social questions & Answers Engine to ask questions answer people’s questions & connect with other people.
Lost your password? Please enter your email address. You will receive a link and will create a new password via email.
Please briefly explain why you feel this question should be reported.
Please briefly explain why you feel this answer should be reported.
Please briefly explain why you feel this user should be reported.
In the flow of control in linux kernel, found that control moves to IDT which has the location of interrupts(ex: 0x80 system call). And then control moves to the appropriate System call. Also read that IDT is initialized at boot time only.
I would like to know more about the IDT information from a real kernel, like its location. Also like to know, wthether at any other time its being modified?
Please help.
Writing a rooktit, are we ?
Anyways, you can use the LIDT/SIDT x86 instructions to directly find and manipulate the IDT.
You can also find some information about IDT hooking on some good phrack articles about exactly this subject.