Re: how to get current cs:eip value for some process while it is in kernel mode?

2008-06-06 Thread Patrick McManus
On Wed, 2008-06-04 at 15:34 +0200, Michal wrote: > "Frédéric Weisbecker" <[EMAIL PROTECTED]> writes: > > > You mean how to get your own kernel's task eip? > No, I mean other process, not current one. I realize that eip changes, > but my process gets stuck somewhere in the kernel for a longer while

Re: how to get current cs:eip value for some process while it is in kernel mode?

2008-06-04 Thread Mulyadi Santosa
Hi.. On Wed, Jun 4, 2008 at 8:34 PM, Michal <[EMAIL PROTECTED]> wrote: > "Frédéric Weisbecker" <[EMAIL PROTECTED]> writes: > >> You mean how to get your own kernel's task eip? > No, I mean other process, not current one. I realize that eip changes, > but my process gets stuck somewhere in the kern

Re: how to get current cs:eip value for some process while it is in kernel mode?

2008-06-04 Thread Michal
"Frédéric Weisbecker" <[EMAIL PROTECTED]> writes: > You mean how to get your own kernel's task eip? No, I mean other process, not current one. I realize that eip changes, but my process gets stuck somewhere in the kernel for a longer while and I would like to know where:)? best regards, Michal -

Re: how to get current cs:eip value for some process while it is in kernel mode?

2008-06-04 Thread Steven
call next next: popl %eax from 2008/6/4 Frédéric Weisbecker <[EMAIL PROTECTED]>: > Oops, I meaned: eip can't be accessed directly. You have to use call. > > 2008/6/4 Frédéric Weisbecker <[EMAIL PROTECTED]>: > > Hello, >> >> You mean how to get your own kernel's task eip? >> It's like

Re: how to get current cs:eip value for some process while it is in kernel mode?

2008-06-04 Thread Frédéric Weisbecker
Oops, I meaned: eip can't be accessed directly. You have to use call. 2008/6/4 Frédéric Weisbecker <[EMAIL PROTECTED]>: > Hello, > > You mean how to get your own kernel's task eip? > It's like in userspace, you can directly access eip but the opcode "call" > pushes eip on the stack so eip can be

RE: how to get current cs:eip value for some process while it is in kernel mode?

2008-06-04 Thread Rajat Jain
> Hallo Group Members > > Is it possible? > You can write inline assembly to get that. Although, I'm sure you realize that it will have changed by the time you get to use it. :-) Thanks, Rajat -- To unsubscribe from this list: send an email with "unsubscribe kernelnewbies" to [EMAIL PROTECTE

Re: how to get current cs:eip value for some process while it is in kernel mode?

2008-06-04 Thread Frédéric Weisbecker
Hello, You mean how to get your own kernel's task eip? It's like in userspace, you can directly access eip but the opcode "call" pushes eip on the stack so eip can be accessed with this kind of code: get_eip: mov (%esp), %eax ret call get_eip //some code <--- eip of this line will be on

how to get current cs:eip value for some process while it is in kernel mode?

2008-06-04 Thread Michal
Hallo Group Members Is it possible? best regards, Michal -- To unsubscribe from this list: send an email with "unsubscribe kernelnewbies" to [EMAIL PROTECTED] Please read the FAQ at http://kernelnewbies.org/FAQ