Skip to content

Instantly share code, notes, and snippets.

@planrich

planrich/gdb dump x86_64 ffi Secret

Created January 4, 2016 16:08
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save planrich/fd25c31213ba565116a9 to your computer and use it in GitHub Desktop.
Save planrich/fd25c31213ba565116a9 to your computer and use it in GitHub Desktop.
Download ZIP
Raw
gdb dump x86_64 ffi
-----------------------------------------------------------------------------------------------------------------------[regs]
RAX: 0x0000000000000008 RBX: 0x00007FFFFFFF75E0 RBP: 0x0000555555C839D0 RSP: 0x00007FFFFFFF7538 o d I t s z a p c
RDI: 0x0000000000000000 RSI: 0x0000000000000001 RDX: 0x0000000000000001 RCX: 0x0000000000000000 RIP: 0x00007FFFEACCDEF8
R8 : 0x0000555555C9C120 R9 : 0x00007FFFF7F74FD0 R10: 0x00007FFFEACCDEF8 R11: 0x00007FFFEACCDEB4 R12: 0x0000000000000000
R13: 0x00007FFFFFFF7700 R14: 0x00007FFFFFFF7670 R15: 0x00007FFFFFFF76E0
CS: 0033 DS: 0000 ES: 0000 FS: 0000 GS: 0000 SS: 002B
-----------------------------------------------------------------------------------------------------------------------[code]
=> 0x7fffeaccdef8 <ffi_closure_unix64+166>: movzx eax,WORD PTR [rsp-0x18]
0x7fffeaccdefd <ffi_closure_unix64+171>: ret
0x7fffeaccdefe <ffi_closure_unix64+172>: mov eax,DWORD PTR [rsp-0x18]
0x7fffeaccdf02 <ffi_closure_unix64+176>: ret
0x7fffeaccdf03 <ffi_closure_unix64+177>: nop
0x7fffeaccdf04 <ffi_closure_unix64+178>: mov rax,QWORD PTR [rsp-0x18]
0x7fffeaccdf09 <ffi_closure_unix64+183>: ret
0x7fffeaccdf0a <ffi_closure_unix64+184>: movss xmm0,DWORD PTR [rsp-0x18]
-----------------------------------------------------------------------------------------------------------------------------
Breakpoint 9, ffi_closure_unix64 () at ../src/x86/unix64.S:269
269 movzwl -24(%rsp), %eax
gdb$ x/x 0x00007FFFFFFF7538-0d24
0x7fffffff7520: 0x00007fffffff097a
gdb$ ni
-----------------------------------------------------------------------------------------------------------------------[regs]
RAX: 0x000000000000097A RBX: 0x00007FFFFFFF75E0 RBP: 0x0000555555C839D0 RSP: 0x00007FFFFFFF7538 o d I t s z a p c
RDI: 0x0000000000000000 RSI: 0x0000000000000001 RDX: 0x0000000000000001 RCX: 0x0000000000000000 RIP: 0x00007FFFEACCDEFD
R8 : 0x0000555555C9C120 R9 : 0x00007FFFF7F74FD0 R10: 0x00007FFFEACCDEF8 R11: 0x00007FFFEACCDEB4 R12: 0x0000000000000000
R13: 0x00007FFFFFFF7700 R14: 0x00007FFFFFFF7670 R15: 0x00007FFFFFFF76E0
CS: 0033 DS: 0000 ES: 0000 FS: 0000 GS: 0000 SS: 002B
-----------------------------------------------------------------------------------------------------------------------[code]
=> 0x7fffeaccdefd <ffi_closure_unix64+171>: ret
0x7fffeaccdefe <ffi_closure_unix64+172>: mov eax,DWORD PTR [rsp-0x18]
0x7fffeaccdf02 <ffi_closure_unix64+176>: ret
0x7fffeaccdf03 <ffi_closure_unix64+177>: nop
0x7fffeaccdf04 <ffi_closure_unix64+178>: mov rax,QWORD PTR [rsp-0x18]
0x7fffeaccdf09 <ffi_closure_unix64+183>: ret
0x7fffeaccdf0a <ffi_closure_unix64+184>: movss xmm0,DWORD PTR [rsp-0x18]
0x7fffeaccdf10 <ffi_closure_unix64+190>: ret
-----------------------------------------------------------------------------------------------------------------------------
ffi_closure_unix64 () at ../src/x86/unix64.S:270
270 ret
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment