linux check_idt, null/unimplemented handlers shouldn't be reported as HOOKED

2026-06-08 18:04:46 +00:00 · 2013-03-25 16:00:52 +00:00
parent 623006f870
commit 94631b577d
1 changed files with 1 additions and 1 deletions
@@ -63,7 +63,7 @@ class linux_check_idt(linux_common.AbstractLinuxCommand):

                idt_addr = ent.Address

-                if not idt_addr in sym_addrs:
+                if idt_addr != 0 and not idt_addr in sym_addrs:
                    yield(i, idt_addr, 1)
                else:
                    yield(i, idt_addr, 0)