Logo Questions Linux Laravel Mysql Ubuntu Git Menu
 

Read Random Memory Locations with Golang

Good evening,

I've been trying to build a golang application which scans values in memory but am struggling trying to understand how to address specific memory locations. I know that when accessing memory within the application you can use *variablename to deference and get the address location, but how would I provide an address location and print the value to the screen or grab the next allocated object of any size from RAM and print it's value?

Thanks in advance for any help you may be willing to share

like image 257
kkirsche Avatar asked May 21 '16 03:05

kkirsche


1 Answers

I don't know how much useful this will be, but here is a sample code.

package main

import (
    "fmt"
    "unsafe"
)

func main() {
    var i int = 1
    fmt.Println("Address : ", &i, " Value : ", i)

    var address *int
    address = &i // getting the starting address

    loc := (uintptr)(unsafe.Pointer(address))
    p := unsafe.Pointer(loc)

    // verification - it should print 1
    var val int = *((* int)(p))
    fmt.Println("Location : ", loc, " Val :",val) // it does print !!

    // lets print 1000 bytes starting from address of variable i
    // first memory location contains 1 as expected
    printValueAtMemoryLocation(loc, 1000)

    // now lets test for some arbitrary memory location
    // not so random ! wanted to reduce the diff value also any arbitrary memory location you can't read !!
    memoryToReach := 842350500000
    loc = changeToInputLocation(loc, memoryToReach)
    fmt.Println("Loc is now at : ", loc)
    // lets print 1000 bytes starting from the memory location "memoryToReach"
    printValueAtMemoryLocation(loc, 1000)

}

func changeToInputLocation(location uintptr, locationToreach int) uintptr {
    var diff,i int
    diff = locationToreach - int(location)

    fmt.Println("We need to travel ", diff, " memory locations !")

    if diff < 0 {
        i= diff * -1
        for i > 0 {
            location--
            i--
        }
    } else {
        i= diff
        for i > 0 {
            location++
            i--
        }
    }
    return location
}

func printValueAtMemoryLocation(location uintptr, next int) {
    var v byte
    p := unsafe.Pointer(location)
    fmt.Println("\n")
    for i:=1; i<next; i++ {
        p = unsafe.Pointer(location)
        v = *((*byte)(p))
        fmt.Print(v," ")
        //fmt.Println("Loc : ", loc, " --- Val : ", v)
        location++
    }
    fmt.Println("\n")
}

Using "unsafe" package is not a good idea, also you can not read any arbitrary location I believe.

For me when I tried some other random locations where, most probably, I didn't have read access, it threw me error like this:

unexpected fault address 0xc41ff8f780
fatal error: fault
[signal SIGBUS: bus error code=0x2 addr=0xc41ff8f780 pc=0x1093ec0]

But hopefully, it can be of some value to you.

like image 123
spd Avatar answered Oct 04 '22 04:10

spd