cubecube

タオルのlibexploit.soを調べて自分が理解できたところまでのメモ

Jun 21st, 2014
779
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 2.55 KB | None | 0 0
  1. .dataセクションにsuとかinstall_recovery.shとかのバイナリデータがあった。
  2.  
  3. 以下、libexploit.so内の関数と、それぞれの中で呼び出している関数を羅列(実行順ではない)。
  4. そして実行されないコードが結構ある。
  5.  
  6. ■Java_com_geohot_towelroot_TowelRoot_rootTheShit
  7. [関数12c0]
  8. [__aeabi_memcpy] x 2
  9.  
  10. ■関数12c0
  11. [関数bd38] x 2
  12. [__android_log_print] x 7
  13. [sleep] x 3
  14. [getpid] x 2
  15. [pthread_create] x 4
  16. [mmap] x 3
  17. [pthread_mutex_lock]
  18. [pthread_cond_wait]
  19.  
  20. ■関数189c
  21. [__android_log_print] x 2
  22. [sleep]
  23. [socket]
  24. [setsockopt]
  25. [bind]
  26. [listen]
  27. [accept] x 2
  28.  
  29. ■関数1b08
  30. [関数7690] x 11
  31. [__android_log_print] x 7
  32. [sleep] x 2
  33. [mmap] x 2
  34. [pthread_mutex_lock] x 3
  35. [pthread_cond_wait] x3
  36. [syscall] x 5
  37. __NR_futex FUTEX_LOCK_PI
  38. __NR_futex FUTEX_CMP_REQUEUE_PI
  39. __NR_futex FUTEX_LOCK_PI
  40. __NR_futex FUTEX_CMP_REQUEUE_PI
  41. __NR_futex FUTEX_CMP_REQUEUE_PI
  42. [kill] x 3
  43. [pthread_mutex_unlock] x 3
  44. [usleep] x 4
  45. [fopen] x 7
  46. [fread] x 7
  47. [strstr] x 7
  48. [atoi] x 7
  49. [malloc] x 2
  50. [pthread_mutex_init] x 2
  51. [write] x 2
  52. [munmap] x 2
  53. [sprintf] x 7
  54.  
  55. ■関数5960
  56. [関数7390] x 2
  57. [__android_log_print]
  58. [sleep] x 2
  59. [syscall] x 5
  60. __NR_gettid
  61. __NR_recvmmsg
  62. __NR_gettid
  63. __NR_sendmmsg
  64. __NR_futex FUTEX_WAIT_REQUEUE_PI
  65. [setpriority] x 2
  66. [perror]
  67. [recvmsg]
  68. [sendmsg]
  69.  
  70. ■関数7390
  71. [__android_log_print]
  72. [sleep]
  73. [socket]
  74. [setsockopt]
  75. [usleep] x 2
  76. [connect]
  77.  
  78. ■関数7690
  79. [pthread_create] x 2
  80. [pthread_mutex_lock] x 2
  81. [pthread_cond_wait] x 2
  82. [pthread_mutex_unlock]
  83. [usleep] x 2
  84. [fopen] x 4
  85. [fread] x 4
  86. [strstr] x 4
  87. [atoi] x 4
  88. [sprintf] x 4
  89.  
  90. ■関数8394
  91. [__android_log_print]
  92. [sleep]
  93. [pthread_mutex_lock] x 2
  94. [syscall] x 3
  95. __NR_futex FUTEX_LOCK_PI
  96. __NR_gettid
  97. __NR_gettid
  98. [pthread_mutex_unlock] x 2
  99. [setpriority] x 2
  100. [pthread_cond_signal] x 2
  101. [sigaction] x 2
  102.  
  103. ■関数881c
  104. [関数b7d8] x 4
  105. [関数ba44] x 6
  106. [__android_log_print] x 18
  107. [sleep] x 6
  108. [pthread_mutex_lock] x 5
  109. [syscall] x 2
  110. __NR_gettid
  111. __NR_splice
  112. [pthread_mutex_unlock] x 3
  113. [fopen] x 4
  114. [pthread_cond_signal] x 2
  115. [fwrite] x 4
  116. [fclose] x 4
  117. [chmod] x 4
  118. [fork]
  119. [system] x 10
  120. [getuid]
  121. [open] x 4
  122. [unlockpt] x 2
  123. [ptsname] x 2
  124. [pipe]
  125. [read]
  126.  
  127. ■関数b7d8
  128. [__android_log_print]
  129. [sleep] x 2
  130. [write]
  131. [pipe]
  132. [read]
  133. [close] x 4
  134. [__errno]
  135.  
  136. ■関数ba44
  137. [__android_log_print] x 2
  138. [sleep]
  139. [write]
  140. [pipe]
  141. [read] x 2
  142. [close] x 4
  143. [__errno] x 2
  144.  
  145. ■関数bd38
  146. [__android_log_print] x 6
  147. [fopen]
  148. [fread]
  149. [strstr]
  150. [atoi]
  151. [fclose]
  152. [__aeabi_memset]
  153. [strlen] x 2
  154. [memcmp]
Advertisement
Add Comment
Please, Sign In to add comment