Skip to content

WP6c: Anti-debug hardening (BRK scanning, timing, self-ptrace) #12

@Brad-Edwards

Description

@Brad-Edwards

Context

Only anti-debug is prctl(PR_SET_DUMPABLE, 0). No detection of software breakpoints, timing anomalies, or external debugger attachment.

Work

  • New daemon/anti_debug.{h,c}:
    • BRK instruction scanning: scan game .text for ARM64 BRK (0xD4200000 mask) not present at baseline
    • Timing calibration: measure calibrated loop execution time, detect single-step slowdown
    • Self-ptrace: PTRACE_TRACEME at daemon startup for explicit detection
  • New tests/test_anti_debug.c

Tests

6 unit tests.

Part of v2.0.0

Metadata

Metadata

Assignees

No one assigned

    Labels

    enhancementNew feature or request

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions