Function interposition in Linux without dlsym

by

see ld’s option --wrap symbol. From the man page:

–wrap symbol Use a wrapper function for symbol. Any undefined
reference to symbol will be resolved
to “__wrap_symbol“. Any undefined
reference to “__real_symbol” will
be resolved to symbol.

This can be used to provide a
wrapper for a system function. The
wrapper function should be called
“__wrap_symbol“. If it wishes to call
the system function, it should call
“__real_symbol“.

Here is a trivial example:

void *
__wrap_malloc (size_t c)
{
    printf ("malloc called with %zu\n", c);
    return __real_malloc (c);
}

If you link other code with this
file using –wrap malloc, then all
calls to “malloc” will call the
function “__wrap_malloc” instead. The
call to “__real_malloc” in
“__wrap_malloc” will call the real
“malloc” function.

You may wish to provide a
“__real_malloc” function as well, so
that links without the –wrap option
will succeed. If you do this, you
should not put the definition of
“__real_malloc” in the same file as
“__wrap_malloc“; if you do, the
assembler may resolve the call before
the linker has a chance to wrap it to
“malloc”.

The other option is to possibly look at the source for ltrace, it is more or less does the same thing :-P.

Here’s an idea though. You could have your LD_PRELOAD‘ed library change the PLT entries to point to your code. This you technically the sbrk() function is still callable from your code nativly.

More Related Contents:

  1. printf anomaly after “fork()”
  2. How to calculate the CPU usage of a process by PID in Linux from C?
  3. How to recursively list directories in C on Linux?
  4. Why does this program print “forked!” 4 times?
  5. How does kernel get an executable binary file running under linux?
  6. How do I execute an external program within C code in Linux with arguments?
  7. stdout thread-safe in C on Linux?
  8. Creating a new directory in C
  9. POSIX API call to list all the pthreads running in a process
  10. Building a kernel module from several source files which one of them has the same name as the module
  11. Turn a simple socket into an SSL socket
  12. After forking, are global variables shared?
  13. How to check if a given file descriptor stored in a variable is still valid?
  14. Problems with SO_BINDTODEVICE Linux socket option
  15. Is there a tool to know whether a value has an exact binary representation as a floating point variable?
  16. plain C: opening a directory with fopen()
  17. How to make ncurses display UTF-8 chars correctly in C?
  18. Reading and writing to serial port in C on Linux
  19. Difference between “system” and “exec” in Linux?
  20. Why my kernel log is not showing the latest output?
  21. Questions about putenv() and setenv()
  22. bind socket to network interface
  23. Process Linkage Table and Global Offset Table
  24. Writing a Linux int 80h system-call wrapper in GNU C inline assembly [duplicate]
  25. Creating your own syntax highlighting in GEdit?
  26. How to make a linux shared object (library) runnable on its own?
  27. /proc/[pid]/pagemaps and /proc/[pid]/maps | linux
  28. getrandom syscall in C not found
  29. Sharing same variable between more than one independent programs in Linux [closed]
  30. argv: Sanitizing wildcards

Leave a Comment