'EIP'에 해당하는 글 1건

bad register name "%eip"

카테고리 없음 2011. 12. 29. 22:29

share this post


 asm volatile("mov %%eip,%0":"=r"(var));

을 컴파일하게 되면 Bad register name "%eip" 라는 메세지가 출력된다.
직접적으로 EIP 를 접근하지 못하기 때문인데 다음과 같은 코드를 사용하면된다.


asm ("call 1f \n\t" "1:pop %0" : "=r"(var)); 



출처 : http://stackoverflow.com/questions/4062403/how-to-check-the-eip-value-with-assembly-language

Since EIP is the program counter, there's no way to access it directly (i.e. it can't be used as the source of a MOV instruction).

There are two ways to access it indirectly:

Use an interrupt and get the saved EIP from the stack,
Use a specially crafted function that fetches its return address (the saved EIP) from the stack.

WRITTEN BY