-atlas wandering-
Bloggorama for breaking things
\
- /(57)
Subscribe
Subscribe
to a (RSS) feed of this weblog.
disass-3.04.tgz
Tue, 04 Dec 2007
POC Demo Instructions
I originally was going to publish a video of me performing the demonstration I included at the end of my POC presentation.
Obviously, that hasn't happened. It took about all the time and energy I had to complete the atlas utility belt when I did, and I'm just starting to recover from the past three months (or rather, my wife is).
I much prefer encouraging others to have their fingers typing anyway, so I'd like to post instructions for doing the demonstrations yourselves.
First download and install vtrace and atlasutils...
This consists of:
$ tar zxf vtrace*gz
$ cd vtrace
$ sudo python setup.py install
(atlasutils is the same process)
Once you have installed vtrace and atlasutils, here are the demos, step-by-step. If you don't get similar results, please email me at here and should be in the local directory)
1. Start up kcalc (only have one instance running)
2. From a shell prompt find out the ProcessID of kcalc by typing "ps ax |grep kcalc"
3. "./memgrep.py
4. Many instances of 'kcalc' should show up, along with a virtual memory address in hex for each
LivePatch demo
(LivePatch is a part of the atlas utility belt)
1. With kcalc still running, pick one of the instances from memgrep.py demo.
2. Type "echo 'atlas' | LivePatch
LiveOrganTransplant demo
(LiveOrganTransplant is a part of the atlas utility belt)
1. With kcalc still running...
2. Type "LiveOrganTransplant
1. With kcalc still running...
2. From a shell prompt, type "python" and hit enter
3. From the ">>>" prompt, type "from atlasutils.vtraceutils import *"
4. Type "me=atch('kcalc')
5. Type "print printStuff(me)" to display some of the most common details about a thread
6. Type "ni(me)" to execute the next instruction (stepping over calls) and printing summary info
7. Type "si(me)" to execute the next instruction (stepping into calls) and printing summary info
8. Type "stepi(me)" to execute the next instruction for each thread
9. Type "traceme(me)" to step through the process printing the output from "printStuff()" after each step
* note: traceme has many options, allowing you to control when it stops processing, like untileip, untilop, and untilreg
* note: you will want to interact with kcalc (which will appear dead) in order to free up the thread from blocking for input
* from the >>> prompt, type "help(traceme)"
10. Type "CTRL-C" to stop the traceme object
Here is my demo run:
atlas@truck:~ $ ps ax |grep kcalc
3589 ? S 0:00 kcalc [kdeinit] -session 10d3cae461000119534480100000052550077_1196448624_713009
28646 pts/19 R+ 0:00 grep kcalc
atlas@truck:~ $ memgrep.py 3589 "kcalc"
Searching PID 3589 for kcalc
/usr/lib/python2.5/site-packages/vtrace/platforms/linux.py:465: DeprecationWarning: 'L' format requires 0 <= number <= 4294967295
return struct.pack("8L", *dbgs) + buf
matched: 0x08074c88 - 'kcalc\x00\r\x08\x10\x00'
matched: 0x0807bcf4 - 'kcalc.so\x00\x00'
matched: 0x0807be40 - 'kcalc\x00\n\x08\x0e\x00'
matched: 0x0807ca20 - 'kcalc\n\x08\x08\x08\x00'
matched: 0x08085536 - 'kcalc.so\x00\x08'
matched: 0x08086a7e - 'kcalc.la\x00\x00'
matched: 0x08086dbb - 'kcalc.so\x00I'
matched: 0x08086f74 - 'kcalc\x00-ses'
matched: 0x08087168 - 'kcalc.la\x00\x00'
matched: 0x080a06e1 - 'kcalc\x00r\x18\x00\x00'
matched: 0x080a08f6 - 'kcalc.la\x00\x00'
matched: 0x080a0d06 - 'kcalc.so\x00\x00'
matched: 0x080a0e3e - 'kcalc.so\x00\x00'
matched: 0x080a0f3c - 'kcalc.so\x00\x00'
matched: 0x080a13d8 - 'kcalc\x00\x00\x00H\x00'
matched: 0x080e3130 - 'kcalc\x00\xf8A\x00\x00'
matched: 0x080e3310 - 'kcalc\x00\x0e\x08\x00\x00'
matched: 0x080e46e0 - 'kcalc-3589'
matched: 0x080e5128 - 'kcalc\x00\x00\x00\x00\x00'
matched: 0x080e8be0 - 'kcalc-3589'
matched: 0x080e93b5 - 'kcalc.mo\x00\x00'
matched: 0x080e9bd6 - 'kcalc.mo\x00o'
matched: 0x080f4fa8 - 'kcalcrc.up'
matched: 0x08136748 - 'kcalc-main'
matched: 0x081367f8 - 'kcalc-main'
matched: 0x08136810 - 'kcalc-main'
matched: 0xb6aff1e2 - 'kcalc.so\x00G'
matched: 0xb6b4336a - 'kcalcrc\x00#0'
matched: 0xb6b44c36 - 'kcalc\x00knie'
matched: 0xb6b4573b - 'kcalc/dlab'
matched: 0xb6b45983 - 'kcalc/kcal'
matched: 0xb6b45989 - 'kcalc.cpp\x00'
matched: 0xb6b45b53 - 'kcalc/kcal'
matched: 0xb6b45b59 - 'kcalcdispl'
matched: 0xb70afdbf - 'kcalc\x00kcan'
matched: 0xb7efa23e - 'kcalc.so\x00l'
matched: 0xb7efa5f4 - 'kcalc.so\x00\x00'
matched: 0xb7efb23e - 'kcalc.so\x00l'
matched: 0xbf98fce6 - 'kcalc [kde'
atlas@truck:~ $ echo "atlas" | LivePatch 3589 0x0807ca20
Attaching to PID 3589...
/usr/lib/python2.5/site-packages/vtrace/platforms/linux.py:465: DeprecationWarning: 'L' format requires 0 <= number <= 4294967295
return struct.pack("8L", *dbgs) + buf
Replacing 6 bytes at memory address 807ca20:
kcalc
Writing 6 bytes at memory address 807ca20...
Completed Successfully
atlas@truck:~ $ LiveOrganTransplant -s 3589 0x0807ca20 1
/usr/lib/python2.5/site-packages/vtrace/platforms/linux.py:465: DeprecationWarning: 'L' format requires 0 <= number <= 4294967295
return struct.pack("8L", *dbgs) + buf
807ca20: atlas
807ca2a:
atlas@truck:~ $ python
Python 2.5.1 (r251:54863, May 2 2007, 16:56:35)
[GCC 4.1.2 (Ubuntu 4.1.2-0ubuntu4)] on linux2
Type "help", "copyright", "credits" or "license" for more information.
>>> from atlasutils.vtraceutils import *
>>> me=atch('kcalc')
Attaching to 3589: kcalc [kdeinit] -session 10d3cae461000119534480100000052550077_1196448624_713009
/usr/lib/python2.5/site-packages/vtrace/platforms/linux.py:465: DeprecationWarning: 'L' format requires 0 <= number <= 4294967295
return struct.pack("8L", *dbgs) + buf
isRunning: False isAttached: True
Threads: {3589: 3589}
Stack Trace: (current thread)
ffffe410 : bf98db18
b73e8136 : bf98db48
b73e7f46 : bf98db58
b73cf609 : bf98db68
b6b355f6 : bf98dcb8
b7efa464 : bf98dcd8
804e6bf : bf98de58
804ef42 : bf98def8
804f318 : bf98e1a8
80505ac : bf98e2c8
41e5cebc : bf98e338
804bb51 : 0
>>> print printStuff(me)
ThreadId: 3589
%esp:
bf98d930: bf98db18 080e7504 080e7380 41f0f39d
bf98d940: b78fe790 080e7380 0000000a b73747f5
bf98d950: 0000000a 080e7380 080e7504 080e7688
bf98d960: b790e774 08219708 00000024 42077b2c
bf98d970: 00000001 080fba40 00000101 00000009
bf98d980: 00000009 00f83ff4 080df1a0 081c6e10
bf98d990: bf98d9c8 41eb1e30 41f85120 081c6e10
bf98d9a0: bf98d9c4 bf98d9bc bf98d9c0 081c6e08
%ebp-92:
bf98dabc: 0000012e 074e5ca3 00000000 00000030
bf98dacc: 00000000 00000000 00000000 00000000
bf98dadc: 00000000 00000000 00000000 00000000
bf98daec: 00000000 00000000 00000000 00000000
bf98dafc: 00000000 00000000 00000000 ff0a0000
bf98db0c: b78fe790 080fba40 bf98dbdc bf98db48
bf98db1c: b73e8136 080df1a0 00000004 0000044e
bf98db2c: b70e7894 bf98db54 b70e7894 bf98db68
eax: fffffdfe ebx: 0000000a ecx: 080e7380 edx: 080e7504 esi: 080e7688 edi: b790e774
eip: ffffe410: pop %ebp None
(ffffe000 (1000): 5 [vdso])
>>> ni(me)
PID 3589 thread(3589) got NOTIFY_STEP
ThreadId: 3589
%esp:
bf98d930: bf98db18 080e7504 080e7380 41f0f39d
bf98d940: b78fe790 080e7380 0000000a b73747f5
bf98d950: 0000000a 080e7380 080e7504 080e7688
bf98d960: b790e774 08219708 00000024 42077b2c
bf98d970: 00000001 080fba40 00000101 00000009
bf98d980: 00000009 00f83ff4 080df1a0 081c6e10
bf98d990: bf98d9c8 41eb1e30 41f85120 081c6e10
bf98d9a0: bf98d9c4 bf98d9bc bf98d9c0 081c6e08
%ebp-92:
bf98dabc: 0000012e 074e5ca3 00000000 00000030
bf98dacc: 00000000 00000000 00000000 00000000
bf98dadc: 00000000 00000000 00000000 00000000
bf98daec: 00000000 00000000 00000000 00000000
bf98dafc: 00000000 00000000 00000000 ff0a0000
bf98db0c: b78fe790 080fba40 bf98dbdc bf98db48
bf98db1c: b73e8136 080df1a0 00000004 0000044e
bf98db2c: b70e7894 bf98db54 b70e7894 bf98db68
eax: 0000008e ebx: 0000000a ecx: 080e7380 edx: 080e7504 esi: 080e7688 edi: b790e774
eip: ffffe403: mov %esp, %ebp None
(ffffe000 (1000): 5 [vdso])
>>> ni(me)
PID 3589 thread(3589) got NOTIFY_STEP
ThreadId: 3589
%esp:
bf98d930: bf98db18 080e7504 080e7380 41f0f39d
bf98d940: b78fe790 080e7380 0000000a b73747f5
bf98d950: 0000000a 080e7380 080e7504 080e7688
bf98d960: b790e774 08219708 00000024 42077b2c
bf98d970: 00000001 080fba40 00000101 00000009
bf98d980: 00000009 00f83ff4 080df1a0 081c6e10
bf98d990: bf98d9c8 41eb1e30 41f85120 081c6e10
bf98d9a0: bf98d9c4 bf98d9bc bf98d9c0 081c6e08
%ebp-92:
bf98d8d4: b78fe790 bf98d928 b77bd924 42fde7fc
bf98d8e4: 00000000 41ec7ec6 00000001 bf98d930
bf98d8f4: 41f83ff4 b6c978e0 080e7708 bf98d908
bf98d904: 42fdebf0 bf98d918 41f22f56 080e59ec
bf98d914: b78fe790 bf98d938 b7713e58 080e59ec
bf98d924: b78fe790 bf98d948 017bda1d bf98db18
bf98d934: 080e7504 080e7380 41f0f39d b78fe790
bf98d944: 080e7380 0000000a b73747f5 0000000a
eax: 0000008e ebx: 0000000a ecx: 080e7380 edx: 080e7504 esi: 080e7688 edi: b790e774
eip: ffffe405: sysenter None
(ffffe000 (1000): 5 [vdso])
>>> ni(me)
PID 3589 thread(3589) got NOTIFY_STEP
ThreadId: 3589
%esp:
bf98d930: bf98db18 080e7504 080e7380 41f0f39d
bf98d940: b78fe790 080e7380 0000000a b73747f5
bf98d950: 0000000a 080e7380 080e7504 080e7688
bf98d960: b790e774 08219708 00000024 42077b2c
bf98d970: 00000001 080fba40 00000101 00000009
bf98d980: 00000009 00f83ff4 080df1a0 081c6e10
bf98d990: bf98d9c8 41eb1e30 41f85120 081c6e10
bf98d9a0: bf98d9c4 bf98d9bc bf98d9c0 081c6e08
%ebp-92:
bf98dabc: 0000012e 074e5ca3 00000000 00000030
bf98dacc: 00000000 00000000 00000000 00000000
bf98dadc: 00000000 00000000 00000000 00000000
bf98daec: 00000000 00000000 00000000 00000000
bf98dafc: 00000000 00000000 00000000 ff0a0000
bf98db0c: b78fe790 080fba40 bf98dbdc bf98db48
bf98db1c: b73e8136 080df1a0 00000004 0000044e
bf98db2c: b70e7894 bf98db54 b70e7894 bf98db68
eax: 00000001 ebx: 0000000a ecx: 080e7380 edx: 080e7504 esi: 080e7688 edi: b790e774
eip: ffffe410: pop %ebp None
(ffffe000 (1000): 5 [vdso])
>>> ni(me)
PID 3589 thread(3589) got NOTIFY_STEP
ThreadId: 3589
%esp:
bf98d934: 080e7504 080e7380 41f0f39d b78fe790
bf98d944: 080e7380 0000000a b73747f5 0000000a
bf98d954: 080e7380 080e7504 080e7688 b790e774
bf98d964: 08219708 00000024 42077b2c 00000001
bf98d974: 080fba40 00000101 00000009 00000009
bf98d984: 00f83ff4 080df1a0 081c6e10 bf98d9c8
bf98d994: 41eb1e30 41f85120 081c6e10 bf98d9c4
bf98d9a4: bf98d9bc bf98d9c0 081c6e08 00000067
%ebp-92:
bf98dabc: 0000012e 074e5ca3 00000000 00000030
bf98dacc: 00000000 00000000 00000000 00000000
bf98dadc: 00000000 00000000 00000000 00000000
bf98daec: 00000000 00000000 00000000 00000000
bf98dafc: 00000000 00000000 00000000 ff0a0000
bf98db0c: b78fe790 080fba40 bf98dbdc bf98db48
bf98db1c: b73e8136 080df1a0 00000004 0000044e
bf98db2c: b70e7894 bf98db54 b70e7894 bf98db68
eax: 00000001 ebx: 0000000a ecx: 080e7380 edx: 080e7504 esi: 080e7688 edi: b790e774
eip: ffffe411: pop %edx None
(ffffe000 (1000): 5 [vdso])
>>> ni(me)
PID 3589 thread(3589) got NOTIFY_STEP
ThreadId: 3589
%esp:
bf98d938: 080e7380 41f0f39d b78fe790 080e7380
bf98d948: 0000000a b73747f5 0000000a 080e7380
bf98d958: 080e7504 080e7688 b790e774 08219708
bf98d968: 00000024 42077b2c 00000001 080fba40
bf98d978: 00000101 00000009 00000009 00f83ff4
bf98d988: 080df1a0 081c6e10 bf98d9c8 41eb1e30
bf98d998: 41f85120 081c6e10 bf98d9c4 bf98d9bc
bf98d9a8: bf98d9c0 081c6e08 00000067 00000001
%ebp-92:
bf98dabc: 0000012e 074e5ca3 00000000 00000030
bf98dacc: 00000000 00000000 00000000 00000000
bf98dadc: 00000000 00000000 00000000 00000000
bf98daec: 00000000 00000000 00000000 00000000
bf98dafc: 00000000 00000000 00000000 ff0a0000
bf98db0c: b78fe790 080fba40 bf98dbdc bf98db48
bf98db1c: b73e8136 080df1a0 00000004 0000044e
bf98db2c: b70e7894 bf98db54 b70e7894 bf98db68
eax: 00000001 ebx: 0000000a ecx: 080e7380 edx: 080e7504 esi: 080e7688 edi: b790e774
eip: ffffe412: pop %ecx None
(ffffe000 (1000): 5 [vdso])
>>> ni(me)
PID 3589 thread(3589) got NOTIFY_STEP
ThreadId: 3589
%esp:
bf98d93c: 41f0f39d b78fe790 080e7380 0000000a
bf98d94c: b73747f5 0000000a 080e7380 080e7504
bf98d95c: 080e7688 b790e774 08219708 00000024
bf98d96c: 42077b2c 00000001 080fba40 00000101
bf98d97c: 00000009 00000009 00f83ff4 080df1a0
bf98d98c: 081c6e10 bf98d9c8 41eb1e30 41f85120
bf98d99c: 081c6e10 bf98d9c4 bf98d9bc bf98d9c0
bf98d9ac: 081c6e08 00000067 00000001 bf98d9d8
%ebp-92:
bf98dabc: 0000012e 074e5ca3 00000000 00000030
bf98dacc: 00000000 00000000 00000000 00000000
bf98dadc: 00000000 00000000 00000000 00000000
bf98daec: 00000000 00000000 00000000 00000000
bf98dafc: 00000000 00000000 00000000 ff0a0000
bf98db0c: b78fe790 080fba40 bf98dbdc bf98db48
bf98db1c: b73e8136 080df1a0 00000004 0000044e
bf98db2c: b70e7894 bf98db54 b70e7894 bf98db68
eax: 00000001 ebx: 0000000a ecx: 080e7380 edx: 080e7504 esi: 080e7688 edi: b790e774
eip: ffffe413: ret None
(ffffe000 (1000): 5 [vdso])
>>> ni(me)
PID 3589 thread(3589) got NOTIFY_STEP
ThreadId: 3589
%esp:
bf98d940: b78fe790 080e7380 0000000a b73747f5
bf98d950: 0000000a 080e7380 080e7504 080e7688
bf98d960: b790e774 08219708 00000024 42077b2c
bf98d970: 00000001 080fba40 00000101 00000009
bf98d980: 00000009 00f83ff4 080df1a0 081c6e10
bf98d990: bf98d9c8 41eb1e30 41f85120 081c6e10
bf98d9a0: bf98d9c4 bf98d9bc bf98d9c0 081c6e08
bf98d9b0: 00000067 00000001 bf98d9d8 41fb4fb0
%ebp-92:
bf98dabc: 0000012e 074e5ca3 00000000 00000030
bf98dacc: 00000000 00000000 00000000 00000000
bf98dadc: 00000000 00000000 00000000 00000000
bf98daec: 00000000 00000000 00000000 00000000
bf98dafc: 00000000 00000000 00000000 ff0a0000
bf98db0c: b78fe790 080fba40 bf98dbdc bf98db48
bf98db1c: b73e8136 080df1a0 00000004 0000044e
bf98db2c: b70e7894 bf98db54 b70e7894 bf98db68
eax: 00000001 ebx: 0000000a ecx: 080e7380 edx: 080e7504 esi: 080e7688 edi: b790e774
eip: 41f0f39d: pop %ebx select
(41e47000 (13b000): 5 /lib/tls/i686/cmov/libc-2.5.so)
>>> si(me)
PID 3589 thread(3589) got NOTIFY_STEP
ThreadId: 3589
%esp:
bf98d944: 080e7380 0000000a b73747f5 0000000a
bf98d954: 080e7380 080e7504 080e7688 b790e774
bf98d964: 08219708 00000024 42077b2c 00000001
bf98d974: 080fba40 00000101 00000009 00000009
bf98d984: 00f83ff4 080df1a0 081c6e10 bf98d9c8
bf98d994: 41eb1e30 41f85120 081c6e10 bf98d9c4
bf98d9a4: bf98d9bc bf98d9c0 081c6e08 00000067
bf98d9b4: 00000001 bf98d9d8 41fb4fb0 080fba40
%ebp-92:
bf98dabc: 0000012e 074e5ca3 00000000 00000030
bf98dacc: 00000000 00000000 00000000 00000000
bf98dadc: 00000000 00000000 00000000 00000000
bf98daec: 00000000 00000000 00000000 00000000
bf98dafc: 00000000 00000000 00000000 ff0a0000
bf98db0c: b78fe790 080fba40 bf98dbdc bf98db48
bf98db1c: b73e8136 080df1a0 00000004 0000044e
bf98db2c: b70e7894 bf98db54 b70e7894 bf98db68
eax: 00000001 ebx: b78fe790 ecx: 080e7380 edx: 080e7504 esi: 080e7688 edi: b790e774
eip: 41f0f39e: pop %esi select
(41e47000 (13b000): 5 /lib/tls/i686/cmov/libc-2.5.so)
tepi(me)
PID 3589 thread(3589) got NOTIFY_STEP
thread 3589: 41f0f39f
>>> stepi(me)
PID 3589 thread(3589) got NOTIFY_STEP
thread 3589: 41f0f3a0
>>> stepi(me)
PID 3589 thread(3589) got NOTIFY_STEP
thread 3589: 41f0f3a5
>>> stepi(me)
PID 3589 thread(3589) got NOTIFY_STEP
thread 3589: 41f0f3a7
>>> stepi(me)
PID 3589 thread(3589) got NOTIFY_STEP
thread 3589: b73747f5
>>> stepi(me)
PID 3589 thread(3589) got NOTIFY_STEP
thread 3589: b73747fb
>>> stepi(me)
PID 3589 thread(3589) got NOTIFY_STEP
thread 3589: b7374802
>>> stepi(me)
PID 3589 thread(3589) got NOTIFY_STEP
thread 3589: b737481c
>>> stepi(me)
PID 3589 thread(3589) got NOTIFY_STEP
thread 3589: b7374822
>>> traceme(me, untileip=0x41f0f3a7)
TRACING EXECUTION... Press CTRL-C to stop. Accounting will be stored in 'locs' and returned
PID 3589 thread(3589) got NOTIFY_STEP
.... (skipped over *many* steps) ....
ThreadId: 3589
%esp:
bf98d8c0: 080e5a08 b78fe790 bf98d8d8 b7375194
bf98d8d0: 00000e05 b78fe790 bf98d928 b77bd924
bf98d8e0: 42fde7fc 00000000 41ec7ec6 00000001
bf98d8f0: bf98d930 41f83ff4 080e7380 41f83ff4
bf98d900: 080e7380 0000000a bf98d918 41f22f26
bf98d910: 080e59cc b78fe790 bf98d938 b7713ec7
bf98d920: 080e59cc b78fe790 bf98d948 017bda1d
bf98d930: b78fe790 080e7380 bf98d948 b7713a12
%ebp-92:
bf98d8ac: 010e27f8 b78fe790 080fba40 bf98d8c8
bf98d8bc: 42fdd451 080e5a08 b78fe790 bf98d8d8
bf98d8cc: b7375194 00000e05 b78fe790 bf98d928
bf98d8dc: b77bd924 42fde7fc 00000000 41ec7ec6
bf98d8ec: 00000001 bf98d930 41f83ff4 080e7380
bf98d8fc: 41f83ff4 080e7380 0000000a bf98d918
bf98d90c: 41f22f26 080e59cc b78fe790 bf98d938
bf98d91c: b7713ec7 080e59cc b78fe790 bf98d948
eax: 00000000 ebx: 42fe9ff4 ecx: 00000001 edx: 00000000 esi: 080e7380 edi: 080e59cc
eip: 42fdd49d: mov 0x8(%edi), %eax pthread_mutex_lock
(42fd6000 (13000): 5 /lib/tls/i686/cmov/libpthread-2.5.so)
{3589: 3589}
PID 3589 thread(3589) got NOTIFY_STEP
ThreadId: 3589
%esp:
bf98d8c0: 080e5a08 b78fe790 bf98d8d8 b7375194
bf98d8d0: 00000e05 b78fe790 bf98d928 b77bd924
bf98d8e0: 42fde7fc 00000000 41ec7ec6 00000001
bf98d8f0: bf98d930 41f83ff4 080e7380 41f83ff4
bf98d900: 080e7380 0000000a bf98d918 41f22f26
bf98d910: 080e59cc b78fe790 bf98d938 b7713ec7
bf98d920: 080e59cc b78fe790 bf98d948 017bda1d
bf98d930: b78fe790 080e7380 bf98d948 b7713a12
%ebp-92:
bf98d8ac: 010e27f8 b78fe790 080fba40 bf98d8c8
bf98d8bc: 42fdd451 080e5a08 b78fe790 bf98d8d8
bf98d8cc: b7375194 00000e05 b78fe790 bf98d928
bf98d8dc: b77bd924 42fde7fc 00000000 41ec7ec6
bf98d8ec: 00000001 bf98d930 41f83ff4 080e7380
bf98d8fc: 41f83ff4 080e7380 0000000a bf98d918
bf98d90c: 41f22f26 080e59cc b78fe790 bf98d938
bf98d91c: b7713ec7 080e59cc b78fe790 bf98d948
eax: 00000000 ebx: 42fe9ff4 ecx: 00000001 edx: 00000000 esi: 080e7380 edi: 080e59cc
eip: 42fdd4a0: test %eax, %eax pthread_mutex_lock
(42fd6000 (13000): 5 /lib/tls/i686/cmov/libpthread-2.5.so)
{3589: 3589}
PID 3589 thread(3589) got NOTIFY_STEP
ThreadId: 3589
%esp:
bf98d8c0: 080e5a08 b78fe790 bf98d8d8 b7375194
bf98d8d0: 00000e05 b78fe790 bf98d928 b77bd924
bf98d8e0: 42fde7fc 00000000 41ec7ec6 00000001
bf98d8f0: bf98d930 41f83ff4 080e7380 41f83ff4
bf98d900: 080e7380 0000000a bf98d918 41f22f26
bf98d910: 080e59cc b78fe790 bf98d938 b7713ec7
bf98d920: 080e59cc b78fe790 bf98d948 017bda1d
bf98d930: b78fe790 080e7380 bf98d948 b7713a12
%ebp-92:
bf98d8ac: 010e27f8 b78fe790 080fba40 bf98d8c8
bf98d8bc: 42fdd451 080e5a08 b78fe790 bf98d8d8
bf98d8cc: b7375194 00000e05 b78fe790 bf98d928
bf98d8dc: b77bd924 42fde7fc 00000000 41ec7ec6
bf98d8ec: 00000001 bf98d930 41f83ff4 080e7380
bf98d8fc: 41f83ff4 080e7380 0000000a bf98d918
bf98d90c: 41f22f26 080e59cc b78fe790 bf98d938
bf98d91c: b7713ec7 080e59cc b78fe790 bf98d948
eax: 00000000 ebx: 42fe9ff4 ecx: 00000001 edx: 00000000 esi: 080e7380 edi: 080e59cc
eip: 42fdd4a2: jnz 0x42fdda40 pthread_mutex_lock
(42fd6000 (13000): 5 /lib/tls/i686/cmov/libpthread-2.5.so)
{3589: 3589}
PID 3589 thread(3589) got NOTIFY_STEP
ThreadId: 3589
%esp:
bf98d8c0: 080e5a08 b78fe790 bf98d8d8 b7375194
bf98d8d0: 00000e05 b78fe790 bf98d928 b77bd924
bf98d8e0: 42fde7fc 00000000 41ec7ec6 00000001
bf98d8f0: bf98d930 41f83ff4 080e7380 41f83ff4
bf98d900: 080e7380 0000000a bf98d918 41f22f26
bf98d910: 080e59cc b78fe790 bf98d938 b7713ec7
bf98d920: 080e59cc b78fe790 bf98d948 017bda1d
bf98d930: b78fe790 080e7380 bf98d948 b7713a12
%ebp-92:
bf98d8ac: 010e27f8 b78fe790 080fba40 bf98d8c8
bf98d8bc: 42fdd451 080e5a08 b78fe790 bf98d8d8
bf98d8cc: b7375194 00000e05 b78fe790 bf98d928
bf98d8dc: b77bd924 42fde7fc 00000000 41ec7ec6
bf98d8ec: 00000001 bf98d930 41f83ff4 080e7380
bf98d8fc: 41f83ff4 080e7380 0000000a bf98d918
bf98d90c: 41f22f26 080e59cc b78fe790 bf98d938
bf98d91c: b7713ec7 080e59cc b78fe790 bf98d948
eax: 00000000 ebx: 42fe9ff4 ecx: 00000001 edx: 00000000 esi: 080e7380 edi: 080e59cc
eip: 42fdd4a8: mov 0xffffffc8(%ebp), %esi pthread_mutex_lock
(42fd6000 (13000): 5 /lib/tls/i686/cmov/libpthread-2.5.so)
{3589: 3589}
PID 3589 thread(3589) got NOTIFY_STEP
ThreadId: 3589
%esp:
bf98d8c0: 080e5a08 b78fe790 bf98d8d8 b7375194
bf98d8d0: 00000e05 b78fe790 bf98d928 b77bd924
bf98d8e0: 42fde7fc 00000000 41ec7ec6 00000001
bf98d8f0: bf98d930 41f83ff4 080e7380 41f83ff4
bf98d900: 080e7380 0000000a bf98d918 41f22f26
bf98d910: 080e59cc b78fe790 bf98d938 b7713ec7
bf98d920: 080e59cc b78fe790 bf98d948 017bda1d
bf98d930: b78fe790 080e7380 bf98d948 b7713a12
%ebp-92:
bf98d8ac: 010e27f8 b78fe790 080fba40 bf98d8c8
bf98d8bc: 42fdd451 080e5a08 b78fe790 bf98d8d8
bf98d8cc: b7375194 00000e05 b78fe790 bf98d928
bf98d8dc: b77bd924 42fde7fc 00000000 41ec7ec6
bf98d8ec: 00000001 bf98d930 41f83ff4 080e7380
bf98d8fc: 41f83ff4 080e7380 0000000a bf98d918
bf98d90c: 41f22f26 080e59cc b78fe790 bf98d938
bf98d91c: b7713ec7 080e59cc b78fe790 bf98d948
eax: 00000000 ebx: 42fe9ff4 ecx: 00000001 edx: 00000000 esi: 00000e05 edi: 080e59cc
eip: 42fdd4ab: xor %eax, %eax pthread_mutex_lock
(42fd6000 (13000): 5 /lib/tls/i686/cmov/libpthread-2.5.so)
{3589: 3589}
PID 3589 thread(3589) got NOTIFY_STEP
....
Have fun!
@
[] permanent link / /
| |
|
|||||||||||||||||||||||||||||||||||||||||||||||||