Log in

View Full Version : Backtrace Logging (Where the HELL is that???)


aimless
April 22nd, 2001, 11:45
Sofice logs is history buffer.

But cannot log the trace buffer. Many times, my correct codes are in the back trace. But inability to log really makes me tear out my hair!!!

Any ICE gods listening ??

Request assistance, please.

As ever

Kayaker
April 22nd, 2001, 20:03
Hiya,

I take it the problem isn't running or viewing the backtrace with SHOW or TRACE, but you'd like to be able to save the trace as you see it so you can peruse it at leisure and compare it with other traces. Yup, would be nice Don't think it can be done though.

The backtrace buffer seems to only contain the addresses of each line executed within the backtrace range specified, not the actual opcodes. I guess this is done internally by SoftIce somehow when you select SHOW. You can find the actual buffer by doing a hex search in SI for one of your traced addresses.

I had asked this sort of question way back when, and Mr Smith, to give credit where due, scoped out that SI uses 7 Bytes per recorded EIP, 4 for the offset, 2 for the selector and 1 for the ring. So the asm line: "0167: 00401234" is recorded as:
34 12 40 00 67 01 03
immediately followed by the next.

So you could dump the entire buffer and write a proggy to convert the binary into an ASCII representation, but you'd still end up with only an address listing. Better than nothing for comparing purposes I guess.

The other option of course is to do screendumps of the SHOW display, a pain but at least you get the opcodes.

Hope this helps,

Kayaker