Tuesday, 15 September 2015

gdb - Inspecting the registers from a specific frame -


If you are inspecting a dump, you will see information to see the values ​​in the registers of gdb , but can you see the values ​​stored in the registers when the program is being implemented to know 0x76FD6908? For example, I want the values ​​of registers only when the PC is at a certain address

You have There are two options:

  1. Frame X , then information register . It gives you all the registers because they were in that stack frame warn that some registers can not be saved; in this situation, GDB will give you wrong value in that frame.
  2. Info Frame X This tells you the registers that were saved in that frame alone: ​​

      Stack frame at 0x7fff5f400150 : Rip = 0x100000eed in burst; 0x7fff5f400170 at 0x7fff5f400170, the 0x100000eed rip called framed by the frame, 0x7fff5f400130 at the applicant, at Argon: 0x7fff5f400148, the local, previous frame of SP 0x7fff5f400150 saved registers: 0x7fff5f400140 at Rbp, 0x7fff5f400148, rip on      

No comments:

Post a Comment