Re: 2.5.63 accesses below %esp (was: Re: ntfs OOPS (2.5.63))

From: Randy.Dunlap (rddunlap@osdl.org)
Date: Thu Mar 13 2003 - 23:29:06 EST


> At 3:24pm -0800 3/13/03, Linus Torvalds wrote:
>>On Thu, 13 Mar 2003, Horst von Brand wrote:
>>>
>>> No need. Just dump some bytes before EIP raw, plus raw bytes + decoded
>>> after EIP. Could be of some help.
>>
>>Alpha does this. Of course, there you don't have any of the partial
>> instruction issues.
>
> If you've got a symbol some reasonable distance before EIP, you could
> decode from there. I wrote a little code that does that (using
> kallsyms) very crudely in the stack trace in order to give the reader a
> hint about stack frames. Go to the prior symbol, which is usually an entry
> point, and find the %esp arithmetic. Works pretty well for figuring out the
> real call chain.

as long as it's not a data symbol...
can you determine that?

~Randy

-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.tux.org/lkml/



This archive was generated by hypermail 2b29 : Sat Mar 15 2003 - 22:00:38 EST