1#@!#!123s

: / usr / share / systemtap / examples / security-band-aids /

Filename : cve-2015-3456.stp

back

probe process("/usr/bin/qemu-system-*").function("fdctrl_write") {
  $reg = (($reg & ~7) | 6) # replace register address with 0x__6
  if (!noted[pid()]) { noted[pid()]=1; println("defanging fdc writes, pid=", pid()) }
}
global noted%