Search Results

thanks for the advices. It works now... I copy the code from other places, multiplication of 4 may due to that EBX may not be accordance to byte address.

Hi,All,
I use ptrace to capture the OPEN syscall, and find problems on getting filename as its argument. Basically, what ebx returns is a pointer to the filename of file to open. My code is as...

Hi all,
I am using ptrace to keep track of clone syscalls in a program. However, I found that the traced syscall cant be paired. for example, there are some syscalls that have entry, but without...