go-obfuscation/pkg/pclntab/rtcorrupt_unsafe.go

//go:build darwin || linux

package pclntab

import (
	"syscall"
	"unsafe"
)

// mprotectRW makes a memory region read-write using an unsafe.Pointer conversion
// from a page-aligned uintptr. This is intentional for runtime memory manipulation.
//
//go:nosplit
func mprotectRW(addr uintptr, size uintptr) error {
	p := *(*unsafe.Pointer)(unsafe.Pointer(&addr))
	return syscall.Mprotect(
		unsafe.Slice((*byte)(p), size),
		syscall.PROT_READ|syscall.PROT_WRITE,
	)
}

//go:nosplit
func mprotectRO(addr uintptr, size uintptr) {
	p := *(*unsafe.Pointer)(unsafe.Pointer(&addr))
	_ = syscall.Mprotect(
		unsafe.Slice((*byte)(p), size),
		syscall.PROT_READ,
	)
}

//go:nosplit
func ptrToSlice(addr uintptr, size uintptr) []byte {
	p := *(*unsafe.Pointer)(unsafe.Pointer(&addr))
	return unsafe.Slice((*byte)(p), size)
}