Rizin
unix-like reverse engineering framework and cli tools
|
Information about the binary layout in a NT_PRSTATUS note for core files of a certain architecture and os. More...
#include <elf.h>
Public Attributes | |
ut64 | regsize |
ut64 | regdelta |
ut8 | sp_size |
Size of the stack pointer register in bits. More... | |
ut64 | sp_offset |
Information about the binary layout in a NT_PRSTATUS note for core files of a certain architecture and os.
ut64 prstatus_layout_t::regdelta |
This delta is the offset into the actual data of an NT_PRSTATUS note where the regstate of size regsize lies. That is, it is the offset after the Elf_(Nhdr) and the variable-length string + optional padding have already been skipped.
see size_t ELFLinuxPrStatus::GetSize(const lldb_private::ArchSpec &arch) in lldb source or similar to determine values for this.
Definition at line 94 of file elf.h.
Referenced by parse_note_prstatus().
ut64 prstatus_layout_t::regsize |
Definition at line 83 of file elf.h.
Referenced by parse_note_prstatus().
ut64 prstatus_layout_t::sp_offset |
Offset of the stack pointer register inside the regstate To determine the layout of the regstate, see lldb source, for example: RegisterContextSP ThreadElfCore::CreateRegisterContextForFrame(StackFrame *frame) decides what to use for the file RegisterContextLinux_x86_64 leads to... g_register_infos_x86_64 which is eventually filled with info using... GPR_OFFSET which takes its info from... the offsets into the GPR struct in RegisterContextLinux_x86_64.cpp
Definition at line 108 of file elf.h.
Referenced by rz_bin_elf_get_sp_val().
ut8 prstatus_layout_t::sp_size |
Size of the stack pointer register in bits.
Definition at line 97 of file elf.h.
Referenced by rz_bin_elf_get_sp_val().