⭐ 欢迎来到虫虫下载站! | 📦 资源下载 📁 资源专辑 ℹ️ 关于我们
⭐ 虫虫下载站

📄 freebsd-x86.c

📁 It s a Linux disassemble, can set break point, disassemble ELF file.
💻 C
字号:
/* * libDebug * * Copyright (C) 2000-2003 Patrick Alken * This library comes with absolutely NO WARRANTY * * Should you choose to use and/or modify this source code, please * do so under the terms of the GNU General Public License under which * this library is distributed. * * $Id: freebsd-x86.c,v 1.1.1.1 2004/04/26 00:40:59 pa33 Exp $ */#include <stdio.h>#include <unistd.h>#include <sys/types.h>#include <sys/ptrace.h>#include <sys/wait.h>#include <assert.h>#include <string.h>#include <signal.h>#include <machine/reg.h>/* * Top-level includes */#include "args.h"#include "break.h"#include "libDebug.h"/* * libString includes */#include "alloc.h"#include "Strn.h"/* * Local: structure which will contain register info *//*static struct reg Regs;*//*x86initRegistersDebug()  Initialize the valptr field of x86Registers[] to point to the correspondingentry in ws->regContentsReturn: 1 if successful        0 if not*/intx86initRegistersDebug(struct debugWorkspace *ws){  int ii; /* looping */  /*   * Set up pointers to general registers   */  x86Registers[REG_EAX].valptr = (void *) &(ws->regContents.Regs.r_eax);  x86Registers[REG_EBX].valptr = (void *) &(ws->regContents.Regs.r_ebx);  x86Registers[REG_ECX].valptr = (void *) &(ws->regContents.Regs.r_ecx);  x86Registers[REG_EDX].valptr = (void *) &(ws->regContents.Regs.r_edx);  x86Registers[REG_ESP].valptr = (void *) &(ws->regContents.Regs.r_esp);  x86Registers[REG_EBP].valptr = (void *) &(ws->regContents.Regs.r_ebp);  x86Registers[REG_ESI].valptr = (void *) &(ws->regContents.Regs.r_esi);  x86Registers[REG_EDI].valptr = (void *) &(ws->regContents.Regs.r_edi);  x86Registers[REG_DS].valptr = (void *) &(ws->regContents.Regs.r_ds);  x86Registers[REG_ES].valptr = (void *) &(ws->regContents.Regs.r_es);  x86Registers[REG_FS].valptr = (void *) &(ws->regContents.Regs.r_fs);  x86Registers[REG_GS].valptr = (void *) &(ws->regContents.Regs.r_gs);  x86Registers[REG_SS].valptr = (void *) &(ws->regContents.Regs.r_ss);  x86Registers[REG_CS].valptr = (void *) &(ws->regContents.Regs.r_cs);  x86Registers[REG_EIP].valptr = (void *) &(ws->regContents.Regs.r_eip);  x86Registers[REG_EFLAGS].valptr = (void *) &(ws->regContents.Regs.r_eflags);  x86Registers[REG_AH].valptr = (void *) &(ws->regContents.Regs.r_eax);  x86Registers[REG_AL].valptr = (void *) &(ws->regContents.Regs.r_eax);  x86Registers[REG_AX].valptr = (void *) &(ws->regContents.Regs.r_eax);  x86Registers[REG_BH].valptr = (void *) &(ws->regContents.Regs.r_ebx);  x86Registers[REG_BL].valptr = (void *) &(ws->regContents.Regs.r_ebx);  x86Registers[REG_BX].valptr = (void *) &(ws->regContents.Regs.r_ebx);  x86Registers[REG_CH].valptr = (void *) &(ws->regContents.Regs.r_ecx);  x86Registers[REG_CL].valptr = (void *) &(ws->regContents.Regs.r_ecx);  x86Registers[REG_CX].valptr = (void *) &(ws->regContents.Regs.r_ecx);  x86Registers[REG_DH].valptr = (void *) &(ws->regContents.Regs.r_edx);  x86Registers[REG_DL].valptr = (void *) &(ws->regContents.Regs.r_edx);  x86Registers[REG_DX].valptr = (void *) &(ws->regContents.Regs.r_edx);  x86Registers[REG_SP].valptr = (void *) &(ws->regContents.Regs.r_esp);  x86Registers[REG_BP].valptr = (void *) &(ws->regContents.Regs.r_ebp);  x86Registers[REG_SI].valptr = (void *) &(ws->regContents.Regs.r_esi);  x86Registers[REG_DI].valptr = (void *) &(ws->regContents.Regs.r_edi);  x86Registers[REG_IP].valptr = (void *) &(ws->regContents.Regs.r_eip);  x86Registers[REG_FLAGS].valptr = (void *) &(ws->regContents.Regs.r_eflags);  /*   * Floating point unit data registers   */  for (ii = 0; ii < FPU_NUM_DATA_REGS; ++ii)  {    x86Registers[REG_ST0 + ii].valptr =      (void *) &(ws->regContents.fpRegs.fpr_acc[ii][0]);  }  /*   * Other floating point unit registers - see npx.h (struct env87)   */  x86Registers[REG_FCTRL].valptr = (void *) &(ws->regContents.fpRegs.fpr_env[0]);  x86Registers[REG_FSTAT].valptr = (void *) &(ws->regContents.fpRegs.fpr_env[1]);  x86Registers[REG_FTAG].valptr = (void *) &(ws->regContents.fpRegs.fpr_env[2]);  x86Registers[REG_FIP].valptr = (void *) &(ws->regContents.fpRegs.fpr_env[3]);  x86Registers[REG_FCS].valptr = (void *) &(ws->regContents.fpRegs.fpr_env[4]);  x86Registers[REG_FOPCODE].valptr = (void *) ((char *) x86Registers[REG_FCS].valptr + sizeof(unsigned short));  x86Registers[REG_FOOFF].valptr = (void *) &(ws->regContents.fpRegs.fpr_env[5]);  x86Registers[REG_FOSEG].valptr = (void *) &(ws->regContents.fpRegs.fpr_env[6]);  /*   * MMX registers   */  for (ii = 0; ii < MMX_NUM_REGS; ++ii)  {    /*     * The mmN register is the low 64 bits of the stN register     * XXX - this is little endian specific     */    x86Registers[REG_MM0 + ii].valptr =      (void *) &(ws->regContents.fpRegs.fpr_acc[ii][0]);  }  return (1);} /* x86initRegistersDebug() *//*x86getCurrentInstruction()  Determine the address of the next instruction to be executed (eip)and return it.Return: address of next instructionSide effects: 'err' is set to 1 if ptrace() fails*/unsigned longx86getCurrentInstruction(struct debugWorkspace *ws, int *err){  assert(ws->pid != NOPID);  /*   * Make sure to always use 'U' here and not a temporary variable,   * or the breakpoint code in x86Continue() will overwrite new   * register contents with old ones when it calls   * x86SetCurrentInstruction()   */  if (ptrace(PT_GETREGS, ws->pid, (caddr_t) &(ws->regContents.Regs), 0) != 0)    *err = 1;  return ((unsigned long) ws->regContents.Regs.r_eip);} /* x86getCurrentInstruction() *//*x86setCurrentInstruction()  Set eip to the given addressReturn: 1 if successful        0 if not*/intx86setCurrentInstruction(struct debugWorkspace *ws, unsigned long address){  assert(ws->pid != NOPID);  ws->regContents.Regs.r_eip = address;  if (ptrace(PT_SETREGS, ws->pid, (caddr_t) &(ws->regContents.Regs), 0) != 0)    return (0);  /*   * Keep our instruction pointer updated   */  ws->instructionPointer = address;  return (1);} /* x86setCurrentInstruction() *//*x86getRegistersDebug()  Update our local copy of the debugged process' registersInputs: ws - debug workspaceReturn: 1 if successful        0 upon ptrace error*/intx86getRegistersDebug(struct debugWorkspace *ws){  if (ptrace(PT_GETREGS, ws->pid, (caddr_t) &(ws->regContents.Regs), 0) != 0)    return (0); /* something went wrong */  if (ptrace(PT_GETFPREGS, ws->pid, (caddr_t) &(ws->regContents.fpRegs), 0) != 0)    return (0); /* something went wrong */  /*   * Save the location of our next instruction   */  ws->instructionPointer = ws->regContents.Regs.r_eip;  return (1);} /* x86getRegistersDebug() */#if 0/*x86readRegisterDebug()  Read the contents of a specified register. Before calling this function,x86getRegistersDebug() should be called to obtain the latest register contents viaptraceInputs: ws     - debug workspace        rptr   - pointer to a register in x86Registers[]        regVal - store register value in hereReturn: size of register in bytesSide effects: regVal.lvalue is set to the register's value if it is a 16 or 32 bit              register              If it is a fpu data register, regVal.stptr is set to the position              on the fpu data stack of the register*/size_tx86readRegisterDebug(struct debugWorkspace *ws, struct x86RegInfo *rptr,                     struct x86RegValue *regVal){  int size;  if (rptr->valptr == (void *) 0)  {    fprintf(stderr,            "x86readRegisterDebug: valptr field of register %s is null\n",            rptr->name);    return (0);  }  if (rptr->flags & R_FPU_DATA)  {    /*     * We want to read one of the fpu data registers. The appropriate     * location in fpr_acc[] was computed for each data register in     * x86initRegistersDebug, so we just need to assign stptr to valptr.     */    regVal->stptr = (unsigned char *) rptr->valptr;    size = 0;  }  else  {    if (rptr->flags & R_BITS8)    {      /*       * We only get here from x86setRegisterDebug(), and we do not want to "and"       * this value to strip off the last byte, since we may be trying to set       * the ah/bh/ch/dh registers which don't occur in the last byte. So let       * x86setRegisterDebug() worry about that stuff.       */      size = 1;      regVal->lvalue = *((unsigned long *) rptr->valptr);    }    else if (rptr->flags & R_BITS16)    {      size = 2;      regVal->lvalue = *((unsigned long *) rptr->valptr) & 0xFFFF;    }    else if (rptr->flags & R_BITS32)    {      size = 4;      regVal->lvalue = *((unsigned long *) rptr->valptr);    }    else      return (0);  }  return (size);} /* x86readRegisterDebug() */#endif /* 0 *//*x86readFPUDebug()  Put the contents of the fpu into a given structureInputs: ws       - debug workspace        fpuState - modified to contain state of fpuReturn: 1 if successful*/intx86readFPUDebug(struct debugWorkspace *ws, struct x86fpuInfo *fpuState){  long fcs;  /* control register */  fpuState->fctrl =    (unsigned short) *((long *) x86Registers[REG_FCTRL].valptr);  /* status register */  fpuState->fstat =    (unsigned short) *((long *) x86Registers[REG_FSTAT].valptr);  /* tag register */  fpuState->ftag =    (unsigned short) *((long *) x86Registers[REG_FTAG].valptr);  /* last instruction pointer (offset) */  fpuState->fip = (long) *((long *) x86Registers[REG_FIP].valptr);  fcs = (long) *((long *) x86Registers[REG_FCS].valptr);  /*fpuState->fcs = (unsigned short) (ws->regContents.fpRegs.fpr_env[4] >> 16);*/  /* last instruction pointer (segment) */  fpuState->fcs = (unsigned short) (fcs & 0xFFFF);  /* opcode */  /*fpuState->fopcode = (unsigned short) (ws->regContents.fpRegs.fpr_env[4] & 0xFFFF);*/  fpuState->fopcode = (unsigned short) (fcs >> 16);  /* last data operand pointer (offset) */  fpuState->fooff = (long) *((long *) x86Registers[REG_FOOFF].valptr);  /* last data operand pointer (segment) */  fpuState->foseg = (long) *((long *) x86Registers[REG_FOSEG].valptr);  memcpy(fpuState->stptr,         (unsigned char *) ws->regContents.fpRegs.fpr_acc,         FPU_NUM_DATA_REGS * FPU_DATA_REG_SIZE);  return (1);} /* x86readFPUDebug() *//*x86writeRegisterDebug()  Update our local copy of the register with the given value and call ptraceto write the changes to the process' registersInputs: ws     - debug workspace        rptr   - pointer to register in x86Registers[]        regVal - contains new value for registerReturn: 1 if successful        0 upon ptrace error*/intx86writeRegisterDebug(struct debugWorkspace *ws, struct x86RegInfo *rptr,                      struct x86RegValue *regVal){  if ((rptr->flags & R_GENERAL) ||      ((rptr->flags & R_FPU) && !(rptr->flags & R_FPU_DATA)))  {    /*     * update ws->regContents.values with the new value of type long     */    *((unsigned long *) rptr->valptr) = regVal->lvalue;  }  else if (rptr->flags & R_FPU_DATA)  {    /*     * update the appropriate register location with the new value of the fpu     * data register     */    memcpy((unsigned char *)rptr->valptr, regVal->stptr, FPU_DATA_REG_SIZE);  }  /*   * Call ptrace to set the actual register   */  if (ptrace(PT_SETREGS, ws->pid, (caddr_t) &(ws->regContents.Regs), 0) != 0)    return (0); /* error */  if (ptrace(PT_SETFPREGS, ws->pid, (caddr_t) &(ws->regContents.fpRegs), 0) != 0)    return (0); /* error */  return (1);} /* x86writeRegistersDebug() */

⌨️ 快捷键说明

复制代码 Ctrl + C
搜索代码 Ctrl + F
全屏模式 F11
切换主题 Ctrl + Shift + D
显示快捷键 ?
增大字号 Ctrl + =
减小字号 Ctrl + -