PDA

View Full Version : Any tool under Linux support set breakpoint at 'Memory, access' just like in ollydbg?


joyung
July 17th, 2014, 04:45
I want debug a ELF format file under Linux, is there any tool under Linux can support set breakpoint at 'Memory, access' just like in ollydbg?

I check edb, but seems no this function.

bilbo
July 17th, 2014, 06:57
Wow, I didn't know EDB, thanks for the tip....

Unfortunately, anyway, the best debugger is yet the command-line SDB, and it can put memory access breakpoints...
look at
http://stackoverflow.com/questions/58851/can-i-set-a-breakpoint-on-memory-access-in-gdb ("http://stackoverflow.com/questions/58851/can-i-set-a-breakpoint-on-memory-access-in-gdb")

Best regards
bilbo

blabberer
July 17th, 2014, 07:31
gdb is capable of setting hardware breakpoint 2939

Indy
July 17th, 2014, 13:04
linux vs olly lool

This OS can not be debugging.

joyung
July 20th, 2014, 22:21
Quote:
[Originally Posted by bilbo;96556]Wow, I didn't know EDB, thanks for the tip....

Unfortunately, anyway, the best debugger is yet the command-line SDB, and it can put memory access breakpoints...
look at
http://stackoverflow.com/questions/58851/can-i-set-a-breakpoint-on-memory-access-in-gdb ("http://stackoverflow.com/questions/58851/can-i-set-a-breakpoint-on-memory-access-in-gdb")

Best regards
bilbo


Dear Bilbo,

Maybe I almost near what I want to do with your given. Here still an issue before I can try this solution, the file(file B) I want to debug is called by another file(file A), so I modify the entrance of file B to "EFEB" to make the debug can break at the entrance of file B. With edb I can modify "EFBE" back to source code and go on debug. Would you help check how to do this in gdb? Many thanks.

joyung
July 20th, 2014, 22:25
Dear blabberer,

Thanks for your guide, would you also help to check my issue at #5 on how to modify EFBE back to the source code with gdb? Many thanks.

blabberer
July 22nd, 2014, 03:56
use set {type} <address> = value notation
like
set {unsigned char } 401000 = \xeb
set {char [200] } 403000 = "hello i am coming commming commmmming"
set { int } 401337 = 0x1337
2940

joyung
July 23rd, 2014, 05:32
Dear blabberer,

Wow, it works, I can debug whant I want to debug now, thank you so much for your guidance and kind help.

joyung
July 27th, 2014, 23:20
...... removed.