m0nad / Diamorphine

LKM rootkit for Linux Kernels 2.6.x/3.x/4.x/5.x/6.x (x86/x86_64 and ARM64)
Other
1.82k stars 431 forks source link

use kallsyms_lookup_name to get syscall_table #18

Closed lckjosh closed 4 years ago

lckjosh commented 4 years ago

In newer kernels the current search for the syscall_table causes a crash. This pull request uses kallsyms_lookup_name to find the syscall_table for kernels above 4.4 instead.

m0nad commented 4 years ago

Hi @lckjosh ,

Thanks for your contribution, I will merge the PR.