from Hacker News

Making a low level Linux debugger, part 2: C

by asrp on 6/25/18, 12:27 PM with 11 comments

  • by saagarjha on 6/25/18, 3:47 PM

    > By convention, the stack is between the value of registers rbp (lower address) and rsp (higher address) and rsp increases when there are more stack frames added. We're on 64-bit Linux so each frame takes up 8 bytes.

    Stack frames grow in size based on local variables allocated on the stack. And $rbp and $rsp need not point at the correct places in the stack for leaf functions, at least on Linux, because it uses the System V ABI.

  • by aleden on 6/25/18, 2:06 PM

    Where's part one? Author states "Last time", but that hyperlink just goes to the same page it's on.

    https://blog.asrpo.com/making_a_low_level_debugger_part_1 gives 404