Add a syscall to kernel and replace linux kernel of RPi.


Prepare:

  1. Cross compiler
  2. Linux Kernel for RPi

Reference:

Official guide


Firstly, get the latest kernel:

git clone https://github.com/raspberrypi/linux

Assume that the kernel directory is 'linux' and you have already installed cross-compiler tool.


Secondly, modify the source to add a simple syscall.

1. linux/arch/arm/kernel/sys_arm.c

Add syscall definition.

In order to simplify the process, we add the definition directly in the source that exists, so that we need not to modify the Makefile. And sys_arm.c is what we need.

Add the following definition to sys_arm.c

asmlinkage long sys_mysyscall(int num)
{
printk("My syscall with argument: %d\n",num);
return 0;
}

There is a second file(Call.S) in the same directory that we need to modify. But, in order to make the process more clear, we change another file first.

2.linux/arch/arm/include/unistd.h

Add macro define of our syscall to this file.

In this file, __NR_SYSCALL_BASE define the base address of syscall. And we will use this macro to define the address of our own function. Like this:

#define __NR_mysyscall (__NR_SYSCALL_BASE+223)

We use the 223th address, because this address is unused.

3.linux/arch/arm/kernel/call.S

Bind the definition and the address of our syscall function.

We have function definition in sys_arm.c and function address in unistd.h. Then we should tell the system, these two is associated.

Add this line in the file:

CALL(sys_mysyscall)

Be sure that this line is added in the 223th entry.

4. linux/include/linux/syscalls.h

Add the declaration of the syscall.

We must let system know 'ther is' a syscall 223. As we usually do, add the feclaration of the function to *.h:

asmlinkage long sys_mysyscall(int num);

Now the syscall is added in the linux kernel. Begin to compile the kernel.


Compile kernel

Personally, I create a new directory kernel-build for output.

That is /home/darren/opt/raspberry/kernel-build. It is not necessary.

Clean

Firstly, clean the project.

#Do you know that who is Mr.Proper? Ha...
make mrproper

Configure

Secondly, configure for your Raspberry.

There are some differences between RPi1 and RPi2. But luckily, the official offer us a template. We need not to do this by our own.

#RPi1
make ARCH=arm CROSS_COMPILE=arm-linux-gnueabihf-
O=/home/darren/opt/raspberry/kernel-build bcm_defconfig #RPi2
make ARCH=arm CROSS_COMPILE=arm-linux-gnueabihf-
O=/home/darren/opt/raspberry/kernel-build bcm2709_defconfig

Okay, that is so easy...

Make

make ARCH=arm CROSS_COMPILE=arm-linux-gnueabihf-
O=/home/darren/opt/raspberry/kernel-build -j 12

Here '-j n' is the number of thread (Is it right? ). To speed up, let it be the 1.5 * the number of processors of your pc.

And you may know the nomber of processor by

cat /proc/cpuinfo | grep processor | wc -l

Install

Insert the sd card to computer. You may get two directories--root and boot.

Denote them like these two:

/media/boot/
/media/root/

Then run this command:

make ARCH=arm CROSS_COMPILE=arm-linux-gnueabihf- O=/home/darren/opt/raspberry/kernel-build -j 12 INSTALL_MOD_PATH=/media/root/ modules

make ARCH=arm CROSS_COMPILE=arm-linux-gnueabihf- O=/home/darren/opt/raspberry/kernel-build -j 12 INSTALL_MOD_PATH=/media/root/ modules_install

Your could replace the kernel.img(or kernel7.img for RPi2) with linux/arch/arm/boot/Image

cp linux/arch/arm/boot/Image /media/boot/

Reboot and all is well.


Syscall

Finally, write a function to call our function:

void inline_asm(int num)
{
asm volatile (
"mov r7, #223\n" //系统调用号
"mov r0, %[value]\n" //参数
"svc #0\n" //监督调用
:: [value] "r" (num) //return 留空,并将 num 作为传入参
);
} int main()
{
int num = 10;
syscall(223, num); //直接使用 223 号系统调用
num = num << 2;
inline_asm(num);
return 0;
}

Add a Syscall的更多相关文章

  1. golang调用c++的dll库文件

    最近使用golang调用c++的dll库文件,简单了解了一下,特作此笔记:一.DLL 的编制与具体的编程语言及编译器无关 dll分com的dll和动态dll,Com组件dll:不管是何种语言写的都可以 ...

  2. Go win32 - 1

    上次说到,我们的GO可以执行系统调用,嘿嘿 不假,但如果你认为你已经掌握了,哈哈,那么不然 网上的例子,总是不深入,不彻底,除非是官网上的demo,也就是说只有设计者才知道告诉你什么才是它设计的正真意 ...

  3. 栈溢出之rop到syscall

    当程序开启了nx,但程序有syscall调用的时候.这时栈溢出的利用就可以通过rop来执行syscall的59号调用execve('/bin/sh',null,null),这是这次alictf一道pw ...

  4. syscall to rop

    前言 hitcon 2017 的 start 题,比较简单,练练手. 题目链接: https://gitee.com/hac425/blog_data/tree/master/hitcon2017 正 ...

  5. [Fw]How to Add a System Call(Fedora Core 6 Kernel : 2.6.18)

    How to Add a System Call Kernel : 2.6.18編譯環境 : Fedora Core 6 假設要加的system call為 sys_project, 有一個int的輸 ...

  6. AutoMapper:Unmapped members were found. Review the types and members below. Add a custom mapping expression, ignore, add a custom resolver, or modify the source/destination type

    异常处理汇总-后端系列 http://www.cnblogs.com/dunitian/p/4523006.html 应用场景:ViewModel==>Mode映射的时候出错 AutoMappe ...

  7. EntityFramework Core 1.1 Add、Attach、Update、Remove方法如何高效使用详解

    前言 我比较喜欢安静,大概和我喜欢研究和琢磨技术原因相关吧,刚好到了元旦节,这几天可以好好学习下EF Core,同时在项目当中用到EF Core,借此机会给予比较深入的理解,这里我们只讲解和EF 6. ...

  8. ASP.NET Core: You must add a reference to assembly mscorlib, version=4.0.0.0

    ASP.NET Core 引用外部程序包的时候,有时会出现下面的错误: The type 'Object' is defined in an assembly that is not referenc ...

  9. Syscall,API,ABI

    系统调用(Syscall):Linux2.6之前是使用int0x80(中断)来实现系统调用的,在2.6之后的内核是使用sysentry/sysexit(32位机器)指令来实现的系统调用,这两条指令是C ...

随机推荐

  1. <!DOCTYPE html PUBLIC 导致js代码不可用

    在有了这个 <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w ...

  2. 大端小端系统_union_栈的增长方向

    一道题引发的思考: 1.看一下之前写的union的特点,理解一下共享内存的概念 2.栈的增长方向是从高地址向低地址增长(数组比较特别,a[0]在低地址,a[n-1]在高地址)(堆由低地址到高地址存储) ...

  3. SQL Server 2008 R2数据库镜像部署

    概述 “数据库镜像”是一种针对数据库高可用性的基于软件的解决方案.其维护着一个数据库的两个相同的副本,这两个副本分别放置在不同的SQL Server数据库实例中.建议使用不同位置的两台服务器来承载.在 ...

  4. Mybatis异常--java.lang.IllegalArgumentException: NO ENUM const class org.apache.ibatis.type.JdbcType.int

    今天下午写代码时发现一直报错,找了半天都没找到错误原因. 最后才发现原来是XML配置错误,某条属性的JdbcType我按照以前ibatis的习惯写的int,但是Mybatis不识别的. 上Mybati ...

  5. select case巧用 oracle

    在做报表的时候,经常会用到分段统计数据,这时候,case就比较有用了: 小例子: SELECT   sh.dc_code, g.bg_code,                   TO_CHAR ( ...

  6. js自定义弹出框

    js自定义弹出框: 代码如下 <html> <head><title>自定义弹出对话框</title> <style type ="te ...

  7. node静态资源管理变迁之路

    使用express自带的,express.static,如:app.use(express.static('hehe')),就可以用localhost/hua.png,访问项目根目录下,hehe文件夹 ...

  8. vi(Visual Editor)常用的命令

    任何用户最常做的事要数创建和编辑文件,包括文档.报告和文字,vi(Visual Editor)是一个有效而相对简单的全荧幕编辑,使用vi,只要记著少量基本指令,就可以开始起步,再学习其他更复 杂的指令 ...

  9. ActiveMQ2

    package com.winner.topic; import org.apache.activemq.ActiveMQConnectionFactory; import javax.jms.Con ...

  10. div垂直居中

    width:265px; height:130px; display:table-cell; vertical-align:middle; text-align:center;