fork_callback

fork_callback.py

def fork_callback(frame, bp_loc, dict):
	global backup_bytes
	global patch_address

	print ("fork() detected!")

	error = lldb.SBError()
	backup_bytes = frame.thread.process.ReadUnsignedFromMemory(patch_address, 2, error)
	
	# backup_bytes = 0x7d8b

	if error.Success():
		print('backup_bytes : 0x%x' % backup_bytes)
	else:
		print('error: ', error)

	# Write infinite loop (EB FE)
	new_value =   struct.pack('H', 0xfeeb)

	result = frame.thread.process.WriteMemory(patch_address, new_value, error)
	if not error.Success() or result != len(new_value):
		print('SBProcess.WriteMemory() failed!')

	print ('child process fully patched')

	# Continue on the parent process 
	frame.thread.process.Continue()