Documentation ¶
Overview ¶
Package linutil contains functions and data structures used by both the linux implementation of the native backend and the core backend to deal with structures used by the linux kernel.
Index ¶
- Variables
- func ElfUpdateSharedObjects(p proc.Process) error
- func EntryPointFromAuxv(auxv []byte, ptrSize int) uint64
- type AMD64PtraceRegs
- type AMD64Registers
- func (r *AMD64Registers) BP() uint64
- func (r *AMD64Registers) Copy() (proc.Registers, error)
- func (r *AMD64Registers) GAddr() (uint64, bool)
- func (r *AMD64Registers) LR() uint64
- func (r *AMD64Registers) PC() uint64
- func (r *AMD64Registers) SP() uint64
- func (r *AMD64Registers) SetReg(regNum uint64, reg *op.DwarfRegister) (bool, error)
- func (r *AMD64Registers) Slice(floatingPoint bool) ([]proc.Register, error)
- func (r *AMD64Registers) TLS() uint64
- type ARM64PtraceFpRegs
- type ARM64PtraceRegs
- type ARM64Registers
- func (r *ARM64Registers) BP() uint64
- func (r *ARM64Registers) Copy() (proc.Registers, error)
- func (r *ARM64Registers) GAddr() (uint64, bool)
- func (r *ARM64Registers) LR() uint64
- func (r *ARM64Registers) PC() uint64
- func (r *ARM64Registers) SP() uint64
- func (r *ARM64Registers) SetReg(regNum uint64, reg *op.DwarfRegister) (fpchanged bool, err error)
- func (r *ARM64Registers) Slice(floatingPoint bool) ([]proc.Register, error)
- func (r *ARM64Registers) TLS() uint64
- type I386PtraceRegs
- type I386Registers
- func (r *I386Registers) BP() uint64
- func (r *I386Registers) CX() uint64
- func (r *I386Registers) Copy() (proc.Registers, error)
- func (r *I386Registers) GAddr() (uint64, bool)
- func (r *I386Registers) LR() uint64
- func (r *I386Registers) PC() uint64
- func (r *I386Registers) SP() uint64
- func (r *I386Registers) Slice(floatingPoint bool) ([]proc.Register, error)
- func (r *I386Registers) TLS() uint64
- type PPC64LEPtraceFpRegs
- type PPC64LEPtraceRegs
- type PPC64LERegisters
- func (r *PPC64LERegisters) BP() uint64
- func (r *PPC64LERegisters) Copy() (proc.Registers, error)
- func (r *PPC64LERegisters) GAddr() (uint64, bool)
- func (r *PPC64LERegisters) LR() uint64
- func (r *PPC64LERegisters) PC() uint64
- func (r *PPC64LERegisters) SP() uint64
- func (r *PPC64LERegisters) Slice(floatingPoint bool) ([]proc.Register, error)
- func (r *PPC64LERegisters) TLS() uint64
Constants ¶
This section is empty.
Variables ¶
var ErrTooManyLibraries = errors.New("number of loaded libraries exceeds maximum")
Functions ¶
func ElfUpdateSharedObjects ¶
ElfUpdateSharedObjects reads the list of dynamic libraries loaded by the dynamic linker from the .dynamic section and uses it to update p.BinInfo(). See the SysV ABI for a description of how the .dynamic section works: http://www.sco.com/developers/gabi/latest/contents.html
func EntryPointFromAuxv ¶
EntryPointFromAuxv searches the elf auxiliary vector for the entry point address. For a description of the auxiliary vector (auxv) format see: System V Application Binary Interface, AMD64 Architecture Processor Supplement, section 3.4.3. System V Application Binary Interface, Intel386 Architecture Processor Supplement (fourth edition), section 3-28.
Types ¶
type AMD64PtraceRegs ¶
type AMD64PtraceRegs struct { R15 uint64 R14 uint64 R13 uint64 R12 uint64 Rbp uint64 Rbx uint64 R11 uint64 R10 uint64 R9 uint64 R8 uint64 Rax uint64 Rcx uint64 Rdx uint64 Rsi uint64 Rdi uint64 Orig_rax uint64 Rip uint64 Cs uint64 Eflags uint64 Rsp uint64 Ss uint64 Fs_base uint64 Gs_base uint64 Ds uint64 Es uint64 Fs uint64 Gs uint64 }
AMD64PtraceRegs is the struct used by the linux kernel to return the general purpose registers for AMD64 CPUs.
type AMD64Registers ¶
type AMD64Registers struct { Regs *AMD64PtraceRegs Fpregs []proc.Register Fpregset *amd64util.AMD64Xstate // contains filtered or unexported fields }
AMD64Registers implements the proc.Registers interface for the native/linux backend and core/linux backends, on AMD64.
func NewAMD64Registers ¶
func NewAMD64Registers(regs *AMD64PtraceRegs, loadFpRegs func(*AMD64Registers) error) *AMD64Registers
func (*AMD64Registers) BP ¶
func (r *AMD64Registers) BP() uint64
func (*AMD64Registers) Copy ¶
func (r *AMD64Registers) Copy() (proc.Registers, error)
Copy returns a copy of these registers that is guaranteed not to change.
func (*AMD64Registers) GAddr ¶
func (r *AMD64Registers) GAddr() (uint64, bool)
GAddr returns the address of the G variable if it is known, 0 and false otherwise.
func (*AMD64Registers) PC ¶
func (r *AMD64Registers) PC() uint64
PC returns the value of RIP register.
func (*AMD64Registers) SP ¶
func (r *AMD64Registers) SP() uint64
SP returns the value of RSP register.
func (*AMD64Registers) SetReg ¶
func (r *AMD64Registers) SetReg(regNum uint64, reg *op.DwarfRegister) (bool, error)
func (*AMD64Registers) Slice ¶
func (r *AMD64Registers) Slice(floatingPoint bool) ([]proc.Register, error)
Slice returns the registers as a list of (name, value) pairs.
func (*AMD64Registers) TLS ¶
func (r *AMD64Registers) TLS() uint64
TLS returns the address of the thread local storage memory segment.
type ARM64PtraceFpRegs ¶
func (*ARM64PtraceFpRegs) Byte ¶
func (fpregs *ARM64PtraceFpRegs) Byte() []byte
func (*ARM64PtraceFpRegs) Decode ¶
func (fpregs *ARM64PtraceFpRegs) Decode() (regs []proc.Register)
type ARM64PtraceRegs ¶
ARM64PtraceRegs is the struct used by the linux kernel to return the general purpose registers for ARM64 CPUs. copy from sys/unix/ztypes_linux_arm64.go:735
type ARM64Registers ¶
type ARM64Registers struct { Regs *ARM64PtraceRegs // general-purpose registers Fpregs []proc.Register // Formatted floating point registers Fpregset []byte // holding all floating point register values // contains filtered or unexported fields }
ARM64Registers is a wrapper for sys.PtraceRegs.
func NewARM64Registers ¶
func NewARM64Registers(regs *ARM64PtraceRegs, iscgo bool, tpidr_el0 uint64, loadFpRegs func(*ARM64Registers) error) *ARM64Registers
func (*ARM64Registers) BP ¶
func (r *ARM64Registers) BP() uint64
func (*ARM64Registers) Copy ¶
func (r *ARM64Registers) Copy() (proc.Registers, error)
Copy returns a copy of these registers that is guaranteed not to change.
func (*ARM64Registers) GAddr ¶
func (r *ARM64Registers) GAddr() (uint64, bool)
GAddr returns the address of the G variable if it is known, 0 and false otherwise.
func (*ARM64Registers) PC ¶
func (r *ARM64Registers) PC() uint64
PC returns the value of RIP register.
func (*ARM64Registers) SP ¶
func (r *ARM64Registers) SP() uint64
SP returns the value of RSP register.
func (*ARM64Registers) SetReg ¶
func (r *ARM64Registers) SetReg(regNum uint64, reg *op.DwarfRegister) (fpchanged bool, err error)
func (*ARM64Registers) Slice ¶
func (r *ARM64Registers) Slice(floatingPoint bool) ([]proc.Register, error)
Slice returns the registers as a list of (name, value) pairs.
func (*ARM64Registers) TLS ¶
func (r *ARM64Registers) TLS() uint64
TLS returns the address of the thread local storage memory segment.
type I386PtraceRegs ¶
type I386PtraceRegs struct { Ebx int32 Ecx int32 Edx int32 Esi int32 Edi int32 Ebp int32 Eax int32 Xds int32 Xes int32 Xfs int32 Xgs int32 Orig_eax int32 Eip int32 Xcs int32 Eflags int32 Esp int32 Xss int32 }
I386PtraceRegs is the struct used by the linux kernel to return the general purpose registers for I386 CPUs.
type I386Registers ¶
type I386Registers struct { Regs *I386PtraceRegs Fpregs []proc.Register Fpregset *amd64util.AMD64Xstate Tls uint64 // contains filtered or unexported fields }
I386Registers implements the proc.Registers interface for the native/linux backend and core/linux backends, on I386.
func NewI386Registers ¶
func NewI386Registers(regs *I386PtraceRegs, loadFpRegs func(*I386Registers) error) *I386Registers
func (*I386Registers) BP ¶
func (r *I386Registers) BP() uint64
func (*I386Registers) CX ¶
func (r *I386Registers) CX() uint64
CX returns the value of ECX register.
func (*I386Registers) Copy ¶
func (r *I386Registers) Copy() (proc.Registers, error)
Copy returns a copy of these registers that is guaranteed not to change.
func (*I386Registers) GAddr ¶
func (r *I386Registers) GAddr() (uint64, bool)
GAddr returns the address of the G variable if it is known, 0 and false otherwise.
func (*I386Registers) PC ¶
func (r *I386Registers) PC() uint64
PC returns the value of EIP register.
func (*I386Registers) SP ¶
func (r *I386Registers) SP() uint64
SP returns the value of ESP register.
func (*I386Registers) Slice ¶
func (r *I386Registers) Slice(floatingPoint bool) ([]proc.Register, error)
Slice returns the registers as a list of (name, value) pairs.
func (*I386Registers) TLS ¶
func (r *I386Registers) TLS() uint64
TLS returns the address of the thread local storage memory segment.
type PPC64LEPtraceFpRegs ¶
type PPC64LEPtraceFpRegs struct {
Fp []byte
}
func (*PPC64LEPtraceFpRegs) Decode ¶
func (fpregs *PPC64LEPtraceFpRegs) Decode() (regs []proc.Register)
type PPC64LEPtraceRegs ¶
type PPC64LEPtraceRegs struct { Gpr [32]uint64 // 32 general-purpose registers, each 64 bits wide Nip uint64 Msr uint64 Orig_gpr3 uint64 Ctr uint64 Link uint64 // Link register -- LLDB dwarf_lr_ppc64le = 65 Xer uint64 // Fixed point exception register -- LLDB dwarf_xer_ppc64le = 76 Ccr uint64 Softe uint64 Trap uint64 Dar uint64 Dsisr uint64 Result uint64 }
PPC64LEPtraceRegs is the struct used by the linux kernel to return the general purpose registers for PPC64LE CPUs. Copied from src/syscall/ztypes_linux_ppc64le.go#L518-L532
type PPC64LERegisters ¶
type PPC64LERegisters struct { Regs *PPC64LEPtraceRegs Fpregs []proc.Register //Formatted floating point registers Fpregset []byte //holding all floating point register values // contains filtered or unexported fields }
PPC64LERegisters implements the proc.Registers interface for the native/linux backend and core/linux backends, on PPC64LE.
func NewPPC64LERegisters ¶
func NewPPC64LERegisters(regs *PPC64LEPtraceRegs, loadFpRegs func(*PPC64LERegisters) error) *PPC64LERegisters
func (*PPC64LERegisters) BP ¶
func (r *PPC64LERegisters) BP() uint64
func (*PPC64LERegisters) Copy ¶
func (r *PPC64LERegisters) Copy() (proc.Registers, error)
Copy returns a copy of these registers that is guaranteed not to change.
func (*PPC64LERegisters) GAddr ¶
func (r *PPC64LERegisters) GAddr() (uint64, bool)
GAddr returns the address of the G variable
func (*PPC64LERegisters) LR ¶
func (r *PPC64LERegisters) LR() uint64
LR The Link Register is a 64-bit register. It can be used to provide the branch target address for the Branch Conditional to Link Register instruction, and it holds the return address after Branch instructions for which LK=1 and after System Call Vectored instructions. Extracted from the 2.3.2 section of the PowerISA Book 3.1
func (*PPC64LERegisters) PC ¶
func (r *PPC64LERegisters) PC() uint64
PC returns the value of the NIP register Also called the IAR/Instruction Address Register or NIP/Next Instruction Pointer
func (*PPC64LERegisters) SP ¶
func (r *PPC64LERegisters) SP() uint64
SP returns the value of Stack frame pointer stored in Gpr[1].
func (*PPC64LERegisters) Slice ¶
func (r *PPC64LERegisters) Slice(floatingPoint bool) ([]proc.Register, error)
Slice returns the registers as a list of (name, value) pairs.
func (*PPC64LERegisters) TLS ¶
func (r *PPC64LERegisters) TLS() uint64
TLS returns the value of the thread pointer stored in Gpr[13]