watchpoint plugin

[GoogleCodeExporter]

I use the tool scanmem in conjunction with watchpoints a lot in reverse 
engineering. Unless I'm missing something obvious, it seems they aren't 
available in edb. I suppose you'd need to write an additional plugin to support 
them. Should be pretty simple -- just needs to behave like gdb's 'watch', 
'rwatch', and 'awatch' commands (break on read, write, and both). A right-click 
context menu entry on the memory window would be the easiest way to set them.

Original issue reported on code.google.com by evan.teran on 3 Oct 2012 at 3:21

[GoogleCodeExporter]

[deleted comment]

[GoogleCodeExporter]

Sure, I'll add this to the planned features. Conceptually is a watch point 
similar to a memory breakpoint? If so, there are 2 options for implementation 
(I'll probably do both to be honest). Either hardware bps (up to 4 of them) or 
memory region access tweaking.

I hope to have this sometime soon.

Evan

Original comment by evan.teran on 3 Oct 2012 at 3:46

[GoogleCodeExporter]

Yeah, watchponts and memory breakpoints are the same thing. Be sure to add all 
three types: break on read, write, and read/write.

Thanks a lot!

Original comment by evan.teran on 3 Oct 2012 at 3:47

[GoogleCodeExporter]

Original comment by evan.teran on 3 Oct 2012 at 3:47

• Changed state: Accepted

[GoogleCodeExporter]

Original comment by evan.teran on 4 Apr 2014 at 3:44

• Added labels: Type-Enhancement