On Thu, 2008-05-15 at 11:39 -0700, Eric W. Biederman wrote: [...] > 2) After we figure out our address read the stack pointer from > a fixed location and simply set it. (This is my preference) Just for confirmation (My English is poor). Do you mean that kernel A just read the stack top as re-entry point, regardless of whether it is return address or argument 1? Best Regards, Huang Ying