c - Access ebp when given eip -
i trying develop runtime stack tracer. have function returns eip address whenever program being traced segfaults. how can ebp of current function (the 1 during program under observation crashed) can start tracing up?
there no way convert instruction pointer stack frame pointer. same function may invoked many times (even recursively) different stack addresses; that's whole point of having call stack. if have crash dump file (core file, etc.) should contain dump of registers. if want register values must read them here.
Comments
Post a Comment