elf_corefile.c File Reference

#include "elf.h"

Go to the source code of this file.

Functions
ut64 Elf_()	rz_bin_elf_get_sp_val (RZ_NONNULL ELFOBJ *bin)
	Get the stack pointer value. More...

Function Documentation

rz_bin_elf_get_sp_val()

ut64 Elf_() rz_bin_elf_get_sp_val

(

RZ_NONNULL ELFOBJ *

bin

)

Get the stack pointer value.

Parameters

elf

binary

Returns

allocated string

Get the value of the stack pointer register in a core file from NT_PRSTATUS

Definition at line 16 of file elf_corefile.c.

                                                         {
    rz_return_val_if_fail(bin, UT64_MAX);
 
    RzBinElfPrStatusLayout *layout = Elf_(rz_bin_elf_get_prstatus_layout)(bin);
    if (!layout) {
        return UT64_MAX;
    }
 
    RzVector *notes;
    rz_bin_elf_foreach_notes_segment(bin, notes) {
        RzBinElfNote *tmp;
        rz_vector_foreach(notes, tmp) {
            if (tmp->type != NT_PRSTATUS) {
                continue;
            }
 
            RzBinElfNotePrStatus *note = &tmp->prstatus;
            if (layout->sp_offset + layout->sp_size / 8 > note->regstate_size) {
                return UT64_MAX;
            }
 
            return rz_read_ble(note->regstate + layout->sp_offset, bin->big_endian, layout->sp_size);
        }
    }
 
    return UT64_MAX;
}

References Elf_, NT_PRSTATUS, rz_bin_elf_note_prstatus_t::regstate, rz_bin_elf_note_prstatus_t::regstate_size, rz_bin_elf_foreach_notes_segment, rz_bin_elf_get_prstatus_layout(), rz_read_ble(), rz_return_val_if_fail, rz_vector_foreach, RzBinElfNote, prstatus_layout_t::sp_offset, prstatus_layout_t::sp_size, autogen_x86imm::tmp, and UT64_MAX.