attach feature on Windows
From bruen...@google.com on April 09, 2012 14:58:26
xref issue #38 : attach injection on Linux xref issue #722 (closed) : internally-triggered attach
the problem with attach on windows of course is the inability to maintain control across a callback return when the callback occurred prior to attaching.
idea: have thin_client presence up front that hooks all alertable syscalls. risk: there are many alertable syscalls and maybe we don't really know all of them. probably best to hook all the file i/o calls even though their alertability depends on their args.
in absence of control up front, we could go ahead and try on windows and lose control briefly, counting on native_exec_syscalls like we do when we lose control on AppInit (though here there are multiple threads), and just document the limitations to any users
Original issue: http://code.google.com/p/dynamorio/issues/detail?id=725