On Sat, Mar 20, 2004 at 06:18:34PM +0000, Tom Hughes wrote:
> The manual page ptrace says that PTRACE_DETACH restarts the child
> as for PTRACE_CONT after having first detached. For PTRACE_CONT it
> says that the data argument is delivered as a signal. The only
> problem is that it says SIGSTOP is an exception to that.
oh, indeed, reading the entire man page is more effective than reading
parts of highly cryptic kernel sources. :)
> That said, the technique we are currently using works on all the
> machines I have tried it on or it wouldn't be there.
anybody on debian unstable with linux 2.4.25?
> > an alternative would be injecting a stackframe and setting the
> > instruction pointer on a pause() call followed by a function
> > epilogue (or better, by some fatal termination, as continuing won't
> > work anyway) ...
> Playing with EIP is not possible either as it defeats the whole object
> of the change to this new technique for attaching the debugger, which
> was to ensure that the debugger saw the real state of the process.
guess why i suggested to inject a stack frame ...
Hi! I'm a .signature virus! Copy me into your ~/.signature, please!
Chaos, panic, and disorder - my work here is done.