Tuesday, September 25, 2018

A vnode pager and a shared libraries cache.

›
A step by step description to find a vnode backing a memory mapping for a particular address. Lets find a vnode behind  0x0007fff51b41000 ...
Sunday, January 14, 2018

A list of default macOS MAC policies

›
A list of default macOS MAC policies (lldb) p mac_policy_list.entries[0].mpc (mac_policy_conf *) $90 = 0xffffff7f823db4b8 (lldb) p *mac_p...
Monday, September 25, 2017

Linux kernel debugging with GDB: getting a task running on a CPU

›
The  current  task is saved in per-cpu space for x86-64 and is accessed through the  gs   register at  current_task  offset as mov %gs...
Sunday, August 13, 2017

Unwinding a kernel mode stack for exception in Linux.

›
Generally GDB is unable to unwind a kernel call stack with an exception frame on it. The unwinding stops on an exception processing. For ...
Saturday, July 29, 2017

Windows developers' misconception about UNIX.

›
While reading osronline.com  forum on Windows file system development I ran into a common misconception among Windows developers regarding...
Monday, July 3, 2017

FltCreateFile and top device.

›
FltCreateFile  calls IoCreateFileEx with  IO_DRIVER_CREATE_CONTEXT.DeviceObjectHint  pointing to the Filter Manager's filter object an...
Tuesday, June 27, 2017

C++ exceptions handling design.

›
A very informative article on exceptions handling design and implications for code optimizations. C++ Exception Handling for IA-64