mach_vm_write 因 (os/kern) 无效地址而失败

Question

我已经创建了一些代码来将内存写入系统上的另一个进程，但是 mach_vm_write() 失败并出现“(os/kern) 无效地址”错误，尽管地址看似是有效的。我的代码如下。

if ((kret = task_for_pid(mach_task_self(), pid, &task)) == KERN_SUCCESS)
    {
        //this succeeds with the correct value.
        if ((kret = get_task_base(task, &base)) == KERN_SUCCESS)
        {
            char patch_1[6] = {0x00, 0x00, 0x00, 0x00, 0x00, 0x00};
            mach_vm_address_t address_1 = base + 0x77777;

            //this also succeeds
            if ((kret = mach_vm_protect(task, address_1, 6, TRUE, VM_PROT_READ | VM_PROT_WRITE | VM_PROT_EXECUTE)) == KERN_SUCCESS)
            {
                //fails with "(os/kern) invalid address" despite using the same value as the previous mach_vm_protect() call.
                if ((kret = mach_vm_write(task, address_1, (vm_offset_t)&patch_1, 6)) == KERN_SUCCESS)
                {

                }
                else printf("mach_vm_write failed w/ error %d: %s\n", kret, mach_error_string(kret));
            }
            else printf("mach_vm_protect failed w/ error %d: %s\n", kret, mach_error_string(kret));
        }
        else printf("mach_vm_region_recurse failed w/ error %d: %s\n", kret, mach_error_string(kret));
    }
else printf("task_for_pid failed w/ error %d: %s\n", kret, mach_error_string(kret));

Answer 1

原来 mach_vm_write() 失败的原因是我的 mach_vm_protect() 调用设置了最大保护。调用应该如下所示：

mach_vm_protect(task, address_1, 6, FALSE, VM_PROT_READ | VM_PROT_WRITE | VM_PROT_EXECUTE)

mach_vm_write 因 (os/kern) 无效地址而失败

mach_vm_write failing with (os/kern) invalid address

c

macos

kernel