Is this working with packed executables ?

[tavy14t]

I tried to hook some functions, such as _exit, syscall(), ... , and it works.
But when you try to preload a packed (e.g. UPX) / crypted executable it doesn't work.

[zardus]

Hmm.. I'm not sure if UPX has some bad interaction with LD_PRELOAD... I don't have time to look into this at the moment, unfortunately... I'll try to take a look when I have time!