ChrisZim / edb-debugger

Automatically exported from code.google.com/p/edb-debugger
GNU General Public License v2.0
0 stars 0 forks source link

Failed to attach to process, please check priviledges and try again #107

Closed GoogleCodeExporter closed 9 years ago

GoogleCodeExporter commented 9 years ago
Well i was trying to check the tibia client, you can download it from :
https://secure.tibia.com/account/?subtopic=downloadclient&step=downloadagreement

linux version or distro

that message pop-up, so i checked the priviledges everything seem to be fine, 
im running edb n ubuntu 10.10, if you know some klind of trick by console or a 
small patch i will be happy to know it, in the meanwhile i will be testing 
another solutions and trying some other stuff, if anything fixes the issue i 
will feedback

Original issue reported on code.google.com by evan.teran on 3 Oct 2012 at 3:22

GoogleCodeExporter commented 9 years ago
well scanmem didnt allow me either, not a surprise

Original comment by evan.teran on 3 Oct 2012 at 5:22

GoogleCodeExporter commented 9 years ago
http://img252.imageshack.us/img252/3186/scanhi.png

Original comment by evan.teran on 3 Oct 2012 at 5:23

GoogleCodeExporter commented 9 years ago
[deleted comment]
GoogleCodeExporter commented 9 years ago
sorry the quality was crappy  http://img41.imageshack.us/img41/2324/scant.png

when i opened the procces it read it, when i run it, just like in olly it 
should open it, sadly says that has an error and shuts down the program, in 
return everything goes to 0

Original comment by evan.teran on 3 Oct 2012 at 5:23

GoogleCodeExporter commented 9 years ago
Interesting, I will look into this.

Original comment by evan.teran on 3 Oct 2012 at 5:23

GoogleCodeExporter commented 9 years ago
ok, i don't really know if its a bug but i cant attach chromium memory either, 
on ollybdg you cant attach it, but you can do so on cheat engine, i think it 
will give a + to edb, just saying, anyways did you found why or what am i doing 
wrong ?

Original comment by evan.teran on 3 Oct 2012 at 5:23

GoogleCodeExporter commented 9 years ago
Yea, this is a weird one. But here's my guess...

I am guessing that chrome (and possibly Tibia also) use the "debug myself" 
trick to prevent debugging.

Basically what this means is that an application can either ptrace itself (or 
have a multiple binaries which all ptrace each other which is what I suspect of 
chrome). Since an application can only have one debugger attached at a time, 
edb gets a permission denied error.

I'll investigate if this is the case and get back to you. If it is in fact the 
case, it would be tricky to work around.

Original comment by evan.teran on 3 Oct 2012 at 5:24

GoogleCodeExporter commented 9 years ago
thanks again evan <3
ill wait your answer :)

Original comment by evan.teran on 3 Oct 2012 at 5:24

GoogleCodeExporter commented 9 years ago
I think that this had two possible causes.

1. The application takes measures to prevent debugging, so not a whole lot we 
can do about it.

2. I've noticed that some video drivers (I'm looking at you nVidia) mess with 
signal processing and end up preventing edb from working correctly.

In both cases, the problem is not fixable by fixing edb. The cause may be 
something else, but I've been only able to reproduce it by one of these two 
means.

Original comment by evan.teran on 18 Jan 2014 at 4:38