Some useful books for crash analysis

When you have to analysis system's problem, crash can be very useful tool. Unfortunately you need to know how to trace back the core dump and also need to have some level of knowledges relating to the assembly. Following are some useful books that you can get basic concepts about it: - System V Application… Continue reading Some useful books for crash analysis

Registers which are using when passing function arguments on x86_64

Brief notes for me which registers are used when passing function arguments on x86_64: %rdi - 1st argument (%rdi:64, %edi:32, %di:16, %dl:8) %rsi - 2nd argument (%rsi:64, %esi:32, %si:16, %sl:8) %rdx - 3rd argument (%rdx:64, %edx:32, %dx:16, %dl:8) %rcx - 4th argument (%rcx:64, %ecx:32, %cx:16, %cl:8) %r8 - 5th argument (%r8:64, %r8d:32, %r8w:16, %r8b:8) %r9… Continue reading Registers which are using when passing function arguments on x86_64