~/talk

Luci: Loader-based Dynamic Software Updates for Off-the-shelf Shared Objects

Talkat USENIX ATC '23 · 2023-07-10..07-12· [security, devops-and-delivery]
links:none on file
links:none on file
links:none on file
slides:none on file

Luci implements a linker/loader that performs dynamic software updates for off-the-shelf shared objects by exploiting PIC relocations and GOT patching, using inotify to detect package updates and mapping non-writable sections into new memory areas while creating aliases for writable sections. It replaces the standard runtime linker (ld‑so), applies relocations, installs a user page‑fault handler for dangling function pointers, and reports compatibility via debug/DWARF metadata. Evaluation on Expat, libxcrypt, OpenSSL and Debian/Ubuntu packages updates most releases—updates 17 of 27 releases automatically—requiring nine restarts, with identical test-suite outputs and no measured runtime overhead.

AI-written summary · about

  1. 0:00Introduction
  2. 2:50Requirements for dynamic updates
  3. 3:33Focus on library updates
  4. 5:40How libraries load
  5. 6:24Design of Lucy linker
  6. 7:26Runtime update process
  7. 8:52Advantages of linker updates
  8. 9:59Lucy implementation
  9. 11:23Evaluating Lucy
  10. 13:31Testing with Expat
  11. 15:38Handling Debian binaries
  12. 17:45Summary
~/search
type to search 6,249 conferences, 138,987 speakers and 185,172 talks
~/help
cmdctrl k
search every conference, speaker and series
/
focus the filter search
h
home
c
conferences
s
speakers
e
series
t
light / dark — the status bar button does the same
?
this help
esc
close this, then clear every filter — or just the search, while you are typing in it

Ignored while you are typing. Pages without a filter rail have no search to focus.