1 | /*******************************************************************************
|
---|
2 | mach_inject.h
|
---|
3 | Copyright (c) 2003-2005 Jonathan 'Wolf' Rentzsch: <http://rentzsch.com>
|
---|
4 | Some rights reserved: <http://creativecommons.org/licenses/by/2.0/>
|
---|
5 |
|
---|
6 | ***************************************************************************/
|
---|
7 |
|
---|
8 | /***************************************************************************//**
|
---|
9 | @mainpage mach_inject
|
---|
10 | @author Jonathan 'Wolf' Rentzsch: <http://rentzsch.com>
|
---|
11 |
|
---|
12 | This package, coded in C to the Mach API, allows you to "inject" code into
|
---|
13 | an arbitrary process. "Injection" means both 1) copying over the necessary
|
---|
14 | code into the target's address space and 2) remotely creating a new thread
|
---|
15 | to execute the code.
|
---|
16 |
|
---|
17 | ***************************************************************************/
|
---|
18 |
|
---|
19 | #ifndef _mach_inject_
|
---|
20 | #define _mach_inject_
|
---|
21 | #include <sys/types.h>
|
---|
22 | #include <mach/error.h>
|
---|
23 | #include <mach/vm_types.h>
|
---|
24 | #include <stddef.h> // for ptrdiff_t
|
---|
25 |
|
---|
26 | #ifdef __cplusplus
|
---|
27 | extern "C" {
|
---|
28 | #endif
|
---|
29 |
|
---|
30 | #define err_threadEntry_image_not_found (err_local|1)
|
---|
31 |
|
---|
32 | #define INJECT_ENTRY injectEntry
|
---|
33 | #define INJECT_ENTRY_SYMBOL "injectEntry"
|
---|
34 |
|
---|
35 | typedef void (*mach_inject_entry)( ptrdiff_t codeOffset, void *paramBlock,
|
---|
36 | size_t paramSize, void* dummy_pthread_data );
|
---|
37 |
|
---|
38 | /***************************************************************************//**
|
---|
39 | Starts executing threadEntry in a new thread in the process specified by
|
---|
40 | targetProcess.
|
---|
41 |
|
---|
42 | @param threadEntry -> Required pointer to injected thread's entry
|
---|
43 | point.
|
---|
44 | @param paramBlock -> Optional pointer to block of memory to pass to
|
---|
45 | the injected thread.
|
---|
46 | @param paramSize -> Optional size of paramBlock.
|
---|
47 | @param targetProcess -> Required target process ID.
|
---|
48 | @param stackSize -> Optional stack size of threadEntry's thread. Set
|
---|
49 | to zero for default (currently 8K usable).
|
---|
50 | @result <- mach_error_t
|
---|
51 |
|
---|
52 | ***************************************************************************/
|
---|
53 |
|
---|
54 | mach_error_t
|
---|
55 | mach_inject(
|
---|
56 | const mach_inject_entry threadEntry,
|
---|
57 | const void *paramBlock,
|
---|
58 | size_t paramSize,
|
---|
59 | pid_t targetProcess,
|
---|
60 | vm_size_t stackSize );
|
---|
61 |
|
---|
62 | /***************************************************************************//**
|
---|
63 | Given a pointer, returns its Mach-O image and image size.
|
---|
64 |
|
---|
65 | @param pointer -> Required pointer.
|
---|
66 | @param image <- Optional returned pointer to image (really a
|
---|
67 | mach_header).
|
---|
68 | @param size <- Optional returned size of the image.
|
---|
69 | @param jumpTableOffset <- Optional returned offset of jump table within image (useful on intel)
|
---|
70 | @param jumpTableSize <- Optional returned size of jump table (useful on intel)
|
---|
71 | @result <- mach_error_t
|
---|
72 |
|
---|
73 | ***************************************************************************/
|
---|
74 |
|
---|
75 | mach_error_t
|
---|
76 | machImageForPointer(
|
---|
77 | const void *pointer,
|
---|
78 | const void **image,
|
---|
79 | unsigned long *size,
|
---|
80 | unsigned int *jumpTableOffset,
|
---|
81 | unsigned int *jumpTableSize );
|
---|
82 |
|
---|
83 | #ifdef __cplusplus
|
---|
84 | }
|
---|
85 | #endif
|
---|
86 | #endif // _mach_inject_ |
---|