[긴급]PHP 원격 코드 실행 취약점 안내
이전
목록
다음
빅

프로그램 정지 상태 조사(strace 이용)

빅뱅1
프로필 보기게시판 작성글 보기전체 작성글 보기전체 댓글 보기
 · 2012-05-14 (월) 12:45:29 · 2929
test os: centos5

strace 패키지ㅣ 없다면 설치합니다.
  yum -y install strace



#include <stdio.h>
#include <sys/types.h>
#include <unistd.h>
#include <string.h>

int main ( int argc, char *argv[])
{
        getpid();

        if(argc<2)
        {
                printf("hang (user|system)");
                return 1;
        }
        if (!strcmp(argv[1],"user"))
        {
                while(1); // LOOP
        }
        else if (!strcmp(argv[1],"system"))
        {
                sleep(5);
    printf("system complete~!");
        }
        return 0;
}


g++ -o hang hang.c

root@localhost c_code # strace ./hang system
execve("./hang", ["./hang", "system"], [/* 21 vars */]) = 0
brk(0)                                  = 0x8ca5000
access("/etc/ld.so.preload", R_OK)      = -1 ENOENT (No such file or directory)
open("/etc/ld.so.cache", O_RDONLY)      = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=29863, ...}) = 0
mmap2(NULL, 29863, PROT_READ, MAP_PRIVATE, 3, 0) = 0xb7f76000
close(3)                                = 0
open("/usr/lib/libstdc++.so.6", O_RDONLY) = 3
read(3, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0\3\0\1\0\0\0P|z\0004\0\0\0"..., 512) = 512
fstat64(3, {st_mode=S_IFREG|0755, st_size=936908, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb7f75000
mmap2(0x768000, 961720, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x768000
mmap2(0x848000, 20480, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0xdf) = 0x848000
mmap2(0x84d000, 23736, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x84d000
close(3)                                = 0
open("/lib/libm.so.6", O_RDONLY)        = 3
read(3, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0\3\0\1\0\0\0\20\324/\0004\0\0\0"..., 512) = 512
fstat64(3, {st_mode=S_IFREG|0755, st_size=208352, ...}) = 0
mmap2(0x2fa000, 155760, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x2fa000
mmap2(0x31f000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x24) = 0x31f000
close(3)                                = 0
open("/lib/libgcc_s.so.1", O_RDONLY)    = 3
read(3, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0\3\0\1\0\0\0`f:\0004\0\0\0"..., 512) = 512
fstat64(3, {st_mode=S_IFREG|0755, st_size=46476, ...}) = 0
mmap2(0x3a5000, 48036, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x3a5000
mmap2(0x3b0000, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0xa) = 0x3b0000
close(3)                                = 0
open("/lib/libc.so.6", O_RDONLY)        = 3
read(3, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0\3\0\1\0\0\0\340\277B\0004\0\0\0"..., 512) = 512
fstat64(3, {st_mode=S_IFREG|0755, st_size=1611564, ...}) = 0
mmap2(0x416000, 1332676, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x416000
mprotect(0x555000, 4096, PROT_NONE)     = 0
mmap2(0x556000, 12288, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x13f) = 0x556000
mmap2(0x559000, 9668, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x559000
close(3)                                = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb7f74000
set_thread_area({entry_number:-1 -> 6, base_addr:0xb7f74ad0, limit:1048575, seg_32bit:1, contents:0, read_exec_only:0, limit_in_pages:1, seg_not_present:0, useable:1}) = 0
mprotect(0x556000, 8192, PROT_READ)     = 0
mprotect(0x31f000, 4096, PROT_READ)     = 0
mprotect(0x848000, 16384, PROT_READ)    = 0
mprotect(0x2d6000, 4096, PROT_READ)     = 0
munmap(0xb7f76000, 29863)               = 0
getpid()                                = 2582
rt_sigprocmask(SIG_BLOCK, [CHLD], [], 8) = 0
rt_sigaction(SIGCHLD, NULL, {SIG_DFL, [], 0}, 8) = 0
rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
nanosleep({5, 0}, {5, 0})               = 0
fstat64(1, {st_mode=S_IFCHR|0620, st_rdev=makedev(136, 0), ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb7f7d000
write(1, "system complete~!", 17system complete~!)       = 17
exit_group(0)                           = ?

root@localhost c_code # strace ./hang user
execve("./hang", ["./hang", "user"], [/* 21 vars */]) = 0
brk(0)                                  = 0x963c000
access("/etc/ld.so.preload", R_OK)      = -1 ENOENT (No such file or directory)
open("/etc/ld.so.cache", O_RDONLY)      = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=29863, ...}) = 0
mmap2(NULL, 29863, PROT_READ, MAP_PRIVATE, 3, 0) = 0xb7f34000
close(3)                                = 0
open("/usr/lib/libstdc++.so.6", O_RDONLY) = 3
read(3, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0\3\0\1\0\0\0P|z\0004\0\0\0"..., 512) = 512
fstat64(3, {st_mode=S_IFREG|0755, st_size=936908, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb7f33000
mmap2(0x768000, 961720, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x768000
mmap2(0x848000, 20480, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0xdf) = 0x848000
mmap2(0x84d000, 23736, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x84d000
close(3)                                = 0
open("/lib/libm.so.6", O_RDONLY)        = 3
read(3, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0\3\0\1\0\0\0\20\324/\0004\0\0\0"..., 512) = 512
fstat64(3, {st_mode=S_IFREG|0755, st_size=208352, ...}) = 0
mmap2(0x2fa000, 155760, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x2fa000
mmap2(0x31f000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x24) = 0x31f000
close(3)                                = 0
open("/lib/libgcc_s.so.1", O_RDONLY)    = 3
read(3, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0\3\0\1\0\0\0`f:\0004\0\0\0"..., 512) = 512
fstat64(3, {st_mode=S_IFREG|0755, st_size=46476, ...}) = 0
mmap2(0x3a5000, 48036, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x3a5000
mmap2(0x3b0000, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0xa) = 0x3b0000
close(3)                                = 0
open("/lib/libc.so.6", O_RDONLY)        = 3
read(3, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0\3\0\1\0\0\0\340\277B\0004\0\0\0"..., 512) = 512
fstat64(3, {st_mode=S_IFREG|0755, st_size=1611564, ...}) = 0
mmap2(0x416000, 1332676, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x416000
mprotect(0x555000, 4096, PROT_NONE)     = 0
mmap2(0x556000, 12288, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x13f) = 0x556000
mmap2(0x559000, 9668, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x559000
close(3)                                = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb7f32000
set_thread_area({entry_number:-1 -> 6, base_addr:0xb7f32ad0, limit:1048575, seg_32bit:1, contents:0, read_exec_only:0, limit_in_pages:1, seg_not_present:0, useable:1}) = 0
mprotect(0x556000, 8192, PROT_READ)     = 0
mprotect(0x31f000, 4096, PROT_READ)     = 0
mprotect(0x848000, 16384, PROT_READ)    = 0
mprotect(0x2d6000, 4096, PROT_READ)     = 0
munmap(0xb7f34000, 29863)               = 0
getpid()                                = 2584



어떤 실행 프로그램이 있을때 , 어느 부분에서 행이 걸렸는지 추적이 가능하네요.
#개발자팁 #개발자 #팁자료실 #linux
|
댓글을 작성하시려면 로그인이 필요합니다.

프로그램

8,188건
태그 필터 (최대 3개) 전체 개발자 소스 기타 mysql 팁자료실 javascript php linux flash 정규표현식 jquery node.js mobile 웹서버 os 프로그램 강좌 썸네일 이미지관련 도로명주소 그누보드5 기획자 견적서 계약서 기획서 마케팅 제안서 seo 통계 서식 통계자료 퍼블리셔 html css 반응형 웹접근성 퍼블리싱 표준화 반응형웹 홈페이지기초 부트스트랩 angularjs 포럼 스크린리더 센스리더 개발자톡 개발자팁 퍼블리셔톡 퍼블리셔팁 기획자톡 기획자팁 프로그램강좌 퍼블리싱강좌
+
제목 글쓴이 날짜 조회
12-06-21 조회 3,888
12-06-21 조회 3,424
12-06-20 조회 3,587
12-06-20 조회 4,165
12-06-20 조회 3,251
12-06-20 조회 4,580
12-06-20 조회 3,230
12-06-20 조회 3,170
12-06-20 조회 3,988
12-06-20 조회 4,202
12-06-18 조회 4,735
12-06-18 조회 3,390
12-06-18 조회 3,517
12-06-18 조회 3,330
12-06-18 조회 4,066
12-06-18 조회 4,712
12-06-17 조회 3,939
12-06-17 조회 3,857
12-06-17 조회 3,496
12-06-16 조회 3,294
12-06-15 조회 3,102
12-06-15 조회 3,808
12-06-15 조회 4,559
12-06-15 조회 4,315
12-06-14 조회 3,947
12-06-14 조회 3,959
12-06-14 조회 3,037
12-06-14 조회 3,443
12-06-14 조회 4,754
12-06-14 조회 3,242
12-06-14 조회 3,079
12-06-13 조회 7,318
12-06-13 조회 3,581
12-06-12 조회 5,556
12-06-11 조회 3,415
12-06-11 조회 3,442
12-06-11 조회 3,433
12-06-11 조회 3,345
12-06-11 조회 3,933
12-06-11 조회 3,240
12-06-08 조회 3,310
12-06-08 조회 4,798
12-06-08 조회 3,106
12-06-08 조회 4,881
12-06-08 조회 3,886
12-06-08 조회 3,424
12-06-08 조회 3,392
12-06-08 조회 4,401
12-06-08 조회 3,017
12-06-08 조회 3,696
12-06-07 조회 3,975
12-06-07 조회 3,861
12-06-06 조회 3,281
12-06-06 조회 3,353
12-06-06 조회 3,667
12-06-06 조회 6,336
12-06-06 조회 5,895
12-06-06 조회 6,630
12-06-05 조회 5,733
12-06-05 조회 3,158
12-06-05 조회 3,234
12-06-05 조회 3,242
12-06-05 조회 1.2만
12-06-05 조회 4,917
12-06-05 조회 5,430
12-06-05 조회 5,182
12-06-05 조회 5,553
12-06-05 조회 3,478
12-06-05 조회 3,431
12-06-05 조회 7,297
12-06-04 조회 3,249
12-06-04 조회 4,103
12-06-04 조회 3,820
12-06-04 조회 3,885
12-06-03 조회 3,732
12-06-02 조회 3,140
12-06-02 조회 3,879
12-06-01 조회 3,287
12-06-01 조회 4,014
12-06-01 조회 3,601
12-06-01 조회 3,244
12-06-01 조회 4,761
12-06-01 조회 3,626
12-06-01 조회 3,231
12-05-31 조회 4,928
12-05-31 조회 3,738
12-05-31 조회 3,681
12-05-31 조회 3,663
12-05-31 조회 3,478
12-05-30 조회 3,141
12-05-30 조회 3,170
12-05-30 조회 3,999
12-05-30 조회 3,242
12-05-29 조회 4,423
12-05-29 조회 3,760
12-05-28 조회 3,125
12-05-28 조회 6,573
12-05-28 조회 3,202
12-05-27 조회 4,543
12-05-27 조회 3,807
글쓰기