Toto
January 26th, 2002, 21:01
What is exactly the back trace buffer in softice?
What can it do and how can we activate it?
Is it useful or does it make things easier?
Aimless
January 28th, 2002, 07:42
Hullo,
Simply put, the backtrace buffer is just that. A backtrace.
What it means is that,
Suppose from address A to address B (they can be far apart), the code travels.
This journey consists of may different types of instructions. There could be many instructions covered between A and B and many more skipped between A and B (jnz, je...and so on)
Backtrace will show you EXACTLY the instructions that were executed! rather than simply what the file contains.
There is an essay (good one) about backtrace buffers on tsehp.cjb.net. Check it out.
However, remember that the buffer is circular. What it means is that initially when you save space for the backtrace buffer (in softice), this space can store certain number of instructions. Beyond that the first one will be replaced and so on.
So make sure that you have enough buffer space.
Also, it might help to read the essay at Tsehp's site.
...Have Phun, Always.
Powered by vBulletin® Version 4.2.2 Copyright © 2018 vBulletin Solutions, Inc. All rights reserved.