wuhailinjerry / edb-debugger

Automatically exported from code.google.com/p/edb-debugger
GNU General Public License v2.0
0 stars 0 forks source link

Outlined stack frames in stack view. #52

Open GoogleCodeExporter opened 9 years ago

GoogleCodeExporter commented 9 years ago
Created attachment 2
outlined stack frame

* Recognize and outline stack frames in the stack view.

(OllyDbg does this and it really helps keeping track of everything in the stack)

The stack frames could be outlined the same way that functions are in code view.

One difference from the analyzer plugin function recognition would be that this 
plugin would operate during runtime (on each step into/step over) and would not 
analyze the stack. This would also help remove false positives.

For instance:
* When a 'call' is made, begin to outline the stack frame of the new function.
* When 'sub esp, 8' is made, extend the already outlined stack frame of the 
current function.
* And of cause remove the outlined stack frame on a 'leave' or 'ret'.
...

I've attached a screenshot to show you what i had in mind.

Original issue reported on code.google.com by evan.teran on 3 Oct 2012 at 3:21

GoogleCodeExporter commented 9 years ago

Original comment by evan.teran on 3 Oct 2012 at 4:03

Attachments:

GoogleCodeExporter commented 9 years ago
I like this suggestion. I'll plan to have it at some point in the near future. 
Unfortunately it is not quite as simple to implement as you suggest. While you 
suggestion would work, it would only work in the case of stepping. I would also 
want it to show correctly when the program was running and you stop too.

At the very least, I could try to frame out the area between two returns which 
should be *approximately* correct. I'll look into it.

Original comment by evan.teran on 3 Oct 2012 at 4:04

GoogleCodeExporter commented 9 years ago

Original comment by evan.teran on 4 Apr 2014 at 3:44