linux之通过ptrace获取指定pthread线程的寄存器信息

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
#include <stdio.h>
#include <unistd.h> //for sleep
#include <stdlib.h> //for exit
#include <pthread.h>//for pthread
#include <errno.h>
//for errno
#include <sys/syscall.h> //for gettid
#define gettid() syscall(__NR_gettid)
void *func(void *para)
{
printf("Hello world.n");
printf("child process tid: %un", gettid());
sleep(-1);	// 该进程一直sleep，等待
return NULL;
}
int main()
{
pthread_t tid;
int ret = pthread_create(&tid, NULL, func, NULL);
if (ret != 0)
{
exit(errno);
}
printf("parent process pid: %un", getpid());
pthread_join(tid, NULL);
return 0;
}

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
#include <sys/ptrace.h>
#include <sys/types.h>
#include <sys/wait.h>
#include <unistd.h>
#include <sys/user.h> /**//* For user_regs_struct
etc. */
#include <stdio.h>
#include <stdlib.h>
//http://www.cnblogs.com/wangkangluo1/archive/2012/06/05/2535484.html
//http://blog.csdn.net/sealyao/article/details/6710772
//通过ptrace获取指定pthread线程的寄存器信息：
int main(int argc, char *argv[])
{
pid_t traced_process;
struct user_regs_struct regs;
long ins;
if (argc != 2)
{
printf("Usage: %s <pid to be traced> ",
argv[0],
argv[1]);
exit(1);
}
traced_process = atoi(argv[1]);
ptrace(PTRACE_ATTACH,traced_process,
NULL,
NULL);
wait(NULL);
ptrace(PTRACE_GETREGS,traced_process,
NULL,
&regs);
ins = ptrace(PTRACE_PEEKTEXT,
traced_process,
regs.eip,
NULL);
printf("EIP: %lx Instruction executed: %lx n",
regs.eip,
ins);
ptrace(PTRACE_DETACH,
traced_process, NULL,NULL);
return 0;
}