Skip to content

Commit

Permalink
chore: add notes to syscall asm for ret code
Browse files Browse the repository at this point in the history
  • Loading branch information
f1zm0 committed Apr 24, 2023
1 parent 4d57328 commit 6da875b
Showing 1 changed file with 3 additions and 0 deletions.
3 changes: 3 additions & 0 deletions syscall_amd64.s
Original file line number Diff line number Diff line change
Expand Up @@ -8,6 +8,9 @@
// with custom modifications to support indirect syscall execution
// via a trampoline (syscall;ret instruction) in ntdll.dll

// return type is a 32-bit datatype, as per NTSTATUS definition (https://msdn.microsoft.com/en-us/library/cc704588.aspx)
// but we use an unsigned integer instead of LONG (int32), since working with uint types is easier in Go


// func execIndirectSyscall(ssn uint16, trampoline uintptr, argh ...uintptr) (errcode uint32)
TEXT ·execIndirectSyscall(SB),NOSPLIT, $0-144
Expand Down

0 comments on commit 6da875b

Please sign in to comment.