Ther 沒(méi) ntially two types of run - time kernel memory patching attacks : those that employ inline function hooks and those that don ' t . i ' ll discuss detecting each in turn 本質(zhì)上存在兩種類(lèi)型的運(yùn)行時(shí)內(nèi)核內(nèi)存補(bǔ)丁攻擊方法:采用內(nèi)嵌函數(shù)掛勾和沒(méi)有使用內(nèi)嵌函數(shù)掛勾。我將逐一討論針對(duì)每一種類(lèi)型補(bǔ)丁的檢測(cè)方法。
What this means is that in order to detect an inline function hook you need to scan , more or less , the entire range of executable kernel memory and look through each unconditional jump instruction 這意味著,為了檢測(cè)一個(gè)內(nèi)嵌函數(shù)掛勾,你得搜索,或多或少,可執(zhí)行內(nèi)核內(nèi)存的整下區(qū)域來(lái)查看每一個(gè)無(wú)條件跳轉(zhuǎn)指令。
According to the characters of c5501 dsp , c codes are optimized by using inline functions , optimize options and parallel instructions . this optimization can further advance the system efficiency . the rate and results of h . 263 encoder and decoder are analyzed and summarized , and the further research direction is pointed out in the end 對(duì)h . 263編解碼器的主要模塊進(jìn)行了分析,找出了運(yùn)算量較大的模塊dct / idct模塊和運(yùn)動(dòng)估計(jì)模塊,分別對(duì)這兩個(gè)模塊進(jìn)行了算法上的優(yōu)化,并實(shí)現(xiàn)了dct / idct的定點(diǎn)化;針對(duì)c5501dsp芯片的特點(diǎn),通過(guò)內(nèi)聯(lián)函數(shù)、優(yōu)化選項(xiàng)和并行指令等的使用對(duì)c代碼進(jìn)行了優(yōu)化,使系統(tǒng)效率得到進(jìn)一步的提高;最后,對(duì)編解碼的速度和編解碼的結(jié)果進(jìn)行了分析總結(jié),并指出了進(jìn)一步研究探索的方向。
In various versions of the C and C++ programming languages, an inline function is a function upon which the compiler has been requested to perform inline expansion. In other words, the programmer has requested that the compiler insert the complete body of the function in every place that the function is called, rather than generating code to call the function in the one place it is defined.