Address space clobbers during fork() (was Re: Extending /proc/*/maps)

[Corinna Vinschen]

On Apr 21 17:40, Chris January wrote:
> >Second, I don't know who maps locale.nls, but it happens *very* early
> >in the life of the process, long before gdb can talk to it. Using
> 
> From what I can gather from http://www.alex-ionescu.com/part1.pdf
> and Reactos source code I believe it's mapped by MmCreatePeb, called
> from PspCreateProcess, called from NtCreateProcess{Ex}. It doesn't
> look like mapping it in advance would help (if that was even
> possible), but it may be possible (but risky) to map it somewhere
> else, update the pointers in the PEB, and then unmap the original.

I scanned the above PDF, but I can't gather where the pointer to
locale.nls is stored in the PEB from that description.


Corinna

-- 
Corinna Vinschen                  Please, send mails regarding Cygwin to
Cygwin Project Co-Leader          cygwin AT cygwin DOT com
Red Hat