Rizin
unix-like reverse engineering framework and cli tools
prstatus_layout_t Struct Reference

Information about the binary layout in a NT_PRSTATUS note for core files of a certain architecture and os. More...

#include <elf.h>

Public Attributes

ut64 regsize
 
ut64 regdelta
 
ut8 sp_size
 Size of the stack pointer register in bits. More...
 
ut64 sp_offset
 

Detailed Description

Information about the binary layout in a NT_PRSTATUS note for core files of a certain architecture and os.

Definition at line 82 of file elf.h.

Member Data Documentation

◆ regdelta

ut64 prstatus_layout_t::regdelta

This delta is the offset into the actual data of an NT_PRSTATUS note where the regstate of size regsize lies. That is, it is the offset after the Elf_(Nhdr) and the variable-length string + optional padding have already been skipped.

see size_t ELFLinuxPrStatus::GetSize(const lldb_private::ArchSpec &arch) in lldb source or similar to determine values for this.

Definition at line 94 of file elf.h.

Referenced by parse_note_prstatus().

◆ regsize

ut64 prstatus_layout_t::regsize

Definition at line 83 of file elf.h.

Referenced by parse_note_prstatus().

◆ sp_offset

ut64 prstatus_layout_t::sp_offset

Offset of the stack pointer register inside the regstate To determine the layout of the regstate, see lldb source, for example: RegisterContextSP ThreadElfCore::CreateRegisterContextForFrame(StackFrame *frame) decides what to use for the file RegisterContextLinux_x86_64 leads to... g_register_infos_x86_64 which is eventually filled with info using... GPR_OFFSET which takes its info from... the offsets into the GPR struct in RegisterContextLinux_x86_64.cpp

Definition at line 108 of file elf.h.

Referenced by rz_bin_elf_get_sp_val().

◆ sp_size

ut8 prstatus_layout_t::sp_size

Size of the stack pointer register in bits.

Definition at line 97 of file elf.h.

Referenced by rz_bin_elf_get_sp_val().


The documentation for this struct was generated from the following file: