143051d27SRobert Mustacchi.\" 243051d27SRobert Mustacchi.\" This file and its contents are supplied under the terms of the 343051d27SRobert Mustacchi.\" Common Development and Distribution License ("CDDL"), version 1.0. 443051d27SRobert Mustacchi.\" You may only use this file in accordance with the terms of version 543051d27SRobert Mustacchi.\" 1.0 of the CDDL. 643051d27SRobert Mustacchi.\" 743051d27SRobert Mustacchi.\" A full copy of the text of the CDDL should have accompanied this 843051d27SRobert Mustacchi.\" source. A copy of the CDDL is also available via the Internet at 943051d27SRobert Mustacchi.\" http://www.illumos.org/license/CDDL. 1043051d27SRobert Mustacchi.\" 1143051d27SRobert Mustacchi.\" 1243051d27SRobert Mustacchi.\" Copyright 2015 Joyent, Inc. 1343051d27SRobert Mustacchi.\" 14*a7d7cafeSRobert Mustacchi.Dd November 27, 2023 1543051d27SRobert Mustacchi.Dt PR_IOCTL 3PROC 1643051d27SRobert Mustacchi.Os 1743051d27SRobert Mustacchi.Sh NAME 1843051d27SRobert Mustacchi.Nm pr_ioctl 1943051d27SRobert Mustacchi.Nd inject ioctl system call into victim process 20*a7d7cafeSRobert Mustacchi.Sh LIBRARY 2143051d27SRobert Mustacchi.Lb libproc 22*a7d7cafeSRobert Mustacchi.Sh SYNOPSIS 2343051d27SRobert Mustacchi.In libproc.h 2443051d27SRobert Mustacchi.Ft int 2543051d27SRobert Mustacchi.Fo pr_ioctl 2643051d27SRobert Mustacchi.Fa "struct ps_prochandle *P" 2743051d27SRobert Mustacchi.Fa "int fd" 2843051d27SRobert Mustacchi.Fa "int code" 2943051d27SRobert Mustacchi.Fa "void *buf" 3043051d27SRobert Mustacchi.Fa "size_t size" 3143051d27SRobert Mustacchi.Fc 3243051d27SRobert Mustacchi.Sh DESCRIPTION 3343051d27SRobert MustacchiThe 3443051d27SRobert Mustacchi.Fn pr_ioctl 3543051d27SRobert Mustacchifunction injects the 3643051d27SRobert Mustacchi.Xr ioctl 2 3743051d27SRobert Mustacchisystem call into the target process 3843051d27SRobert Mustacchi.Fa P 3943051d27SRobert Mustacchiby means of the agent LWP. 4043051d27SRobert MustacchiIf the process handle 4143051d27SRobert Mustacchi.Fa P 4243051d27SRobert Mustacchiis the value 4343051d27SRobert Mustacchi.Dv NULL 4443051d27SRobert Mustacchithen this will be equivalent to calling 4543051d27SRobert Mustacchi.Xr ioctl 2 4643051d27SRobert Mustacchion the currently running process. 4743051d27SRobert Mustacchi.Pp 4843051d27SRobert MustacchiThe arguments 4943051d27SRobert Mustacchi.Fa fd , 5043051d27SRobert Mustacchi.Fa code , 5143051d27SRobert Mustacchiand 5243051d27SRobert Mustacchi.Fa buf 5343051d27SRobert Mustacchihave the same meaning as in 5443051d27SRobert Mustacchi.Xr ioctl 2 . 5543051d27SRobert MustacchiSee 5643051d27SRobert Mustacchi.Xr ioctl 2 5743051d27SRobert Mustacchifor the full description and purpose of the 5843051d27SRobert Mustacchi.Sy ioctl 5943051d27SRobert Mustacchisystem call and its arguments. 6043051d27SRobert Mustacchi.Pp 6143051d27SRobert MustacchiUnlike the traditional 6243051d27SRobert Mustacchi.Xr ioctl 2 6343051d27SRobert Mustacchisystem call, the 6443051d27SRobert Mustacchi.Fn pr_ioctl 6543051d27SRobert Mustacchifunction needs to know the maximum size of the buffer 6643051d27SRobert Mustacchi.Fa buf 6743051d27SRobert Mustacchisuch that it can be properly injected into the address space of the 6843051d27SRobert Mustacchitarget process. 6943051d27SRobert Mustacchi.Pp 7043051d27SRobert MustacchiThe 7143051d27SRobert Mustacchi.Fn pr_ioctl 7272d3dbb9SYuri Pankovfunction only works on active processes. 7372d3dbb9SYuri PankovProcess handles that correspond to core files, zombie processes, or ELF objects 7472d3dbb9SYuri Pankovdo not support system call injection. 7543051d27SRobert Mustacchi.Sh RETURN VALUES 7643051d27SRobert MustacchiUpon successful completion, the 7743051d27SRobert Mustacchi.Fn pr_ioctl 7843051d27SRobert Mustacchifunction's return value is that described in 7943051d27SRobert Mustacchi.Xr ioctl 2 . 8043051d27SRobert MustacchiOtherwise, 8143051d27SRobert Mustacchi.Sy -1 8243051d27SRobert Mustacchiis returned and 8343051d27SRobert Mustacchi.Sy errno 8443051d27SRobert Mustacchiis set to 8543051d27SRobert Mustacchi.Er ENOSYS 8643051d27SRobert Mustacchito indicate that the system call could not be injected. 8743051d27SRobert Mustacchi.Sh ERRORS 8843051d27SRobert MustacchiFor the full list of errors see the 8943051d27SRobert Mustacchi.Sy ERRORS 9043051d27SRobert Mustacchisection in 9143051d27SRobert Mustacchi.Xr ioctl 2 . 9243051d27SRobert Mustacchi.Pp 9343051d27SRobert MustacchiThe 9443051d27SRobert Mustacchi.Fn pr_ioctl 9543051d27SRobert Mustacchifunction will fail if: 9643051d27SRobert Mustacchi.Bl -tag -width Er 9743051d27SRobert Mustacchi.It Er ENOSYS 9843051d27SRobert MustacchiAn error occurred while trying to invoke the agent LWP and inject a 9943051d27SRobert Mustacchisystem call in the process handle 10043051d27SRobert Mustacchi.Fa P 10143051d27SRobert Mustacchior the process handle 10243051d27SRobert Mustacchi.Fa P 10343051d27SRobert Mustacchidoes not support system call injection. 10443051d27SRobert Mustacchi.El 10543051d27SRobert Mustacchi.Sh INTERFACE STABILITY 10643051d27SRobert Mustacchi.Sy Uncommitted 10743051d27SRobert Mustacchi.Sh MT-LEVEL 10843051d27SRobert MustacchiSee 10943051d27SRobert Mustacchi.Sy LOCKING 11043051d27SRobert Mustacchiin 11143051d27SRobert Mustacchi.Xr libproc 3LIB . 11243051d27SRobert Mustacchi.Sh SEE ALSO 11343051d27SRobert Mustacchi.Xr ioctl 2 , 11443051d27SRobert Mustacchi.Xr libproc 3LIB , 115bbf21555SRichard Lowe.Xr proc 5 116