gdb如何打破或踩到剥离二进制文件的分叉进程

时间:2016-03-01 15:07:22

标签: debugging gdb reverse-engineering

我有一个剥离的二进制文件崩溃,我想要反转它。我试过了'信息文件'获取EntryPoint并在那里设置断点。但是,其中一个子进程发生了分段错误......

 [New process 40472]
 process 40472 is executing new program: /usr/bin/dpkg
 [Thread debugging using libthread_db enabled]
 Using host libthread_db library "/lib/x86_64-linux-gnu/libthread_db.so.1".
 [Inferior 2 (process 40472) exited normally]
 E: Method http has died unexpectedly!
 E: Sub-process http received a segmentation fault.

从文档中我发现'显示劣等'但我不知道如何看到段错的细节?我尝试了设置后叉模式'智利,但它看起来并没有帮助。 例如,我想检查寄存器的值,如RIP等。

支持这个过程产生了这个:

 [pid 54137] writev(3, [{"\0\37", 2}, {"{\346\1\0\0\1\0\0\0\0\0\0\4http\4example\3org\0\0\1\0\1", 31}, {"\0\37", 2}, {"\357\24\1\0\0\1\0\0\0\0\0\0\4http\4example\3org\0\0\34\0\1", 31}], 4) = 66
 [pid 54137] read(3,  <unfinished ...>
 [pid 54134] <... read resumed> "\10\376", 2) = 2
 [pid 54134] read(3, "X\250AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA"..., 2302) = 2302
 [pid 54134] close(3)                    = 0
 [pid 54134] --- SIGSEGV {si_signo=SIGSEGV, si_code=SI_KERNEL, si_addr=0} ---
 [pid 54134] +++ killed by SIGSEGV +++
 [pid 54131] <... select resumed> )      = 1 (in [5], left {0, 425835})
 [pid 54131] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=54134,  si_uid=0, si_status=SIGSEGV, si_utime=0, si_stime=1} ---
 close(4)
 ....  
 ....
 ....
 close(5)                                = 0
 close(4)                                = 0
 write(2, "E", 1E)                        = 1
 write(2, ": ", 2: )                       = 2
 write(2, "Method http has died unexpectedl"..., 34Method http has died      unexpectedly!) = 34
write(2, "\n", 1
)                       = 1
write(2, "E", 1E)                        = 1
write(2, ": ", 2: )                       = 2
write(2, "Sub-process http received a segm"..., 47Sub-process http received a      segmentation fault.) = 47
write(2, "\n", 1
)                       = 1
close(3)                                = 0
exit_group(100)                         = ?
+++ exited with 100 +++

0 个答案:

没有答案