User Stack Trace
Frank Ch. Eigler
fche@redhat.com
Tue Apr 17 19:40:00 GMT 2007
grundym@us.ibm.com (grundy) writes:
> [...]
> struct frame_head {
> struct frame_head * ebp;
> unsigned long ret;
> } __attribute__((packed)) stack_frame[2], *head;
> [...]
> head = (struct frame_head *)nregs->ebp;
> if (user_mode_vm(nregs)) {
> [...]
> _stp_copy_from_user ((char *)stack_frame,
> (const char __user *) head->ebp,
> sizeof(stack_frame));
> head = stack_frame;
> [...]
To what extent does this work for user code compiled without frame
pointers? Or containing corrupt/malicious stack data?
- FChE
More information about the Systemtap
mailing list