Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 9 Jun 2006 02:39:44 +0000
From:      "Pranav Peshwe" <pranavpeshwe@gmail.com>
To:        freebsd-questions@freebsd.org
Cc:        Tofik Suleymanov <secnews@oxygen.az>
Subject:   Re: reading process memory
Message-ID:  <cdfd7d6d0606081939j395c308ek58da1c480a5de444@mail.gmail.com>
In-Reply-To: <4486A111.6020300@oxygen.az>
References:  <4486A111.6020300@oxygen.az>

next in thread | previous in thread | raw e-mail | index | archive | help
On 6/7/06, Tofik Suleymanov <secnews@oxygen.az> wrote:
>
> Hello, folks
>
> I believe that it is possible to read contents of the memory
> used/utilized by a process (assuming right privileges).
> First i've tried to do this through procfs by reading 'mem' property of
> the given process, but no success.
> Maybe there is another way of doing such things ?
> Any clue would be appreciated.


If i understood correctly what you wish to do,then you can
 use the proc_rwmem() function in the kernel.But ofcourse,
it can only be used through a KLD or directly through
the kernel src.This is what ptrace ultimately uses.

For 5.4 stable you can find it here :
http://fxr.watson.org/fxr/ident?v=RELENG54&i=proc_rwmem

HTH.

Regards,
Pranav

--------------------------------------------------------
UNIX is a computer virus with an interface.
 -- The UNIX-HATERS Handbook



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?cdfd7d6d0606081939j395c308ek58da1c480a5de444>