from Hacker News

"Let's hook up " – said every LD_PRELOAD

by waveywaves on 11/5/24, 4:18 AM with 1 comments

  • by waveywaves on 11/5/24, 4:18 AM

    Second part of my series about exploring mirrord internals. In this one I start scratching the mirrord-layer surface and see how it's dynamically loaded with LD_PRELOAD into binaries to hook into libc functions whilst creating a layer which accepts inputs from mirrord-agent, which are then used to hydrate the hooked libc functions. I spend time in this article to explore this trying to intuitively understand what's going on.