On 12/12/2025 18:36, Pierrick Bouvier wrote: > On 12/12/25 4:02 AM, Alex Bennée wrote: >> Florian Hofhammer <[email protected]> writes: >> >>> Hi, >>> >>> Sorry for necrobumping this thread. I just wanted to follow up on this >>> and ask if there is still interest in this plugin API extension or if it >>> is going to be dropped in favor of the Lorelei patches (which would also >>> fulfill my original use case). >> >> These are the system call filter patches? >> >> I guess that depends on if being able to change PC is only for skipping >> syscalls? >> > > Both can probably coexist, as they serve different purposes. > If only considering syscalls, the syscall filter (that you propose first) is > the best way to deal with it, as it's architecture agnostic. > > That said, it would be sad to drop the effort you made into this series, and > overriding pc can be convenient if anyone wants to filter anything else than > syscalls, or for fuzzing purpose.
Yes, while the syscall filtering was my initial use case, setting the PC and diverting control flow can also be used for patching out functionality, diverting function calls, in-process resets for fuzzing, or other use cases. No hard feelings if there isn't enough upstream interest, though! :) Thanks, Florian
