I know radare can attach to pids... but what about core dumps? Is it working?
Here I state my problem: I have core dumps of binaries (without symbols, -O2) in a special _undesired_ state (segfault, assertion failed, etc.). I need to know the function parameters and the values in structs. What I need: - I'd like an easy way of seeing the function parameters, maybe giving the proper $esp address to a radare script, given a function prototype. I could use some of your per/c-compiler combinations for that. - I'd like an easy way of resolving values of structures. I know you have some script for that, but I can't remember which. gdb question: Is there a variable for the frame pointer when I'm "in a frame"? (f 1, f 2...) _______________________________________________ radare mailing list [email protected] https://lists.nopcode.org/mailman/listinfo/radare
