公开(公告)号：US09665355B2

公开(公告)日：2017-05-30

申请号：US14826588

申请日：2015-08-14

Applicant: VMware, Inc.

Inventor： Manish Jawa ,  Haim Tebeka ,  Craig F. Newell

IPC: G06F9/44 ,  G06F9/445 ,  G06F21/54 ,  G06F9/54 ,  G06F21/31 ,  G06F21/60 ,  G06F21/53 ,  H04W12/02 ,  H04L29/08 ,  H04L29/06 ,  H04W12/00

CPC classification number: G06F8/54 ,  G06F8/61 ,  G06F9/44521 ,  G06F9/54 ,  G06F21/31 ,  G06F21/53 ,  G06F21/54 ,  G06F21/602 ,  G06F21/604 ,  G06F2221/2107 ,  G06F2221/2143 ,  G06F2221/2149 ,  H04L63/0272 ,  H04L63/10 ,  H04L63/20 ,  H04L67/146 ,  H04W12/00 ,  H04W12/02

Abstract: An example method includes modifying, prior to run time, an executable file of an application to cause an operating system loader to load additional code using a dynamically-linked library. Modifying the executable file includes determining whether the executable file includes sufficient unused space to accommodate a load command, and adding the load command to the executable file when the executable file includes sufficient unused space by: shifting, in the executable file, an existing load command that does not contain dependency information to make space for the load command; or identifying unused space outside of a data portion of the executable file that can be removed to accommodate the load command. The additional code, when executed by a processor, causes the processor to change a pointer in a table that indicates an address of an imported function implementing a system call so the pointer indicates an address of a customized function.

公开(公告)号：US09111087B2

公开(公告)日：2015-08-18

申请号：US13756347

申请日：2013-01-31

Applicant: VMware, Inc.

Inventor： Manish Jawa ,  Haim Tebeka ,  Craig Newell

IPC: G06F9/44 ,  G06F21/54 ,  G06F9/445 ,  G06F21/31 ,  G06F21/60 ,  G06F21/53 ,  H04W12/02 ,  H04L29/06 ,  H04W12/00

CPC classification number: G06F8/54 ,  G06F8/61 ,  G06F9/44521 ,  G06F9/54 ,  G06F21/31 ,  G06F21/53 ,  G06F21/54 ,  G06F21/602 ,  G06F21/604 ,  G06F2221/2107 ,  G06F2221/2143 ,  G06F2221/2149 ,  H04L63/0272 ,  H04L63/10 ,  H04L63/20 ,  H04L67/146 ,  H04W12/00 ,  H04W12/02

Abstract: One embodiment of the present invention provides a system for facilitating replacement of a system call in an application with a customized function call. During operation, the system re-links the application's executable file with additional code or dynamically injects the additional code to the application's executable file during run time. The additional code can change a pointer in a table which indicates addresses of imported functions so that the pointer indicates an address of the customized function call.

Abstract translation: 本发明的一个实施例提供了一种用于在具有定制的功能呼叫的应用中便于更换系统呼叫的系统。 在运行期间，系统将应用程序的可执行文件与其他代码重新链接，或者在运行时间内将附加代码动态地注入到应用程序的可执行文件中。 附加代码可以更改表中的指针，该指针指示导入的函数的地址，以便指针指示自定义函数调用的地址。