|
From: | Clemens Kolbitsch |
Subject: | Re: [Qemu-devel] Debugging guest OS / tracing instruction pointer |
Date: | Thu, 14 Jun 2007 17:21:49 +0200 |
User-agent: | Thunderbird 1.5.0.12 (X11/20070604) |
Paul Brook wrote:
the thing is: i want to monitor the eip... or where the code will jump NEXT. the code there is never executed (as it results in a kernel failure)On Thursday 14 June 2007, Clemens Kolbitsch wrote:hi! i'm looking for a way to monitor the eip register. is there a simple way to do this? i know that that produces tons of data... even better would be to know where i could intercept the main-loop (exec_cpu ??) to check for a certain eip value...qemu already has mechanisms for supporting debugger breakpoints. Sounds like you want something very similar.Paul
e.g. i know a buffer overflow will set the return-pointer to 0xABCD and "ret" is executed i want the breakpoint to hit
when using casual breakpoints, i think the code there must be executed (i.e. the jump must be successful .. what will definitely not be the case with 0xABCD)
thanks!
[Prev in Thread] | Current Thread | [Next in Thread] |