Method, device and system for determining function call relationship

Abstract

The embodiment of the invention relates to a method, device and system for determining the function call relationship. The method comprises the steps: searching an instruction from an instruction address of a current code segment of a function to the high address direction to obtain a first SP (stack pointer) offset of the function; searching an instruction from the instruction address of the code segment to the low address direction to obtain a second SP offset of the function so as to obtain the offset of a stack frame of an address relative function storing a function return address; and obtaining the SP offset of the function according to the first SP offset and the second SP offset, wherein the SP of the function points to the stack frame of the function when the SP offset meets the preset requirement; and the return address of the function can be obtained according to the stack frame and the offset of the function. By tracing the function call relationship in the high address direction and the low address direction, the method can improve the accuracy in tracing the function call relationship.

Description

technical field [0001] The invention relates to the field of computers, in particular to a method, device and system for determining a function calling relationship. Background technique [0002] When the program is abnormal or the program is debugged, the traditional method of tracing the function call relationship is to use the CPU hardware register (such as the frame register) and the stack to complete. Specifically, under the mips architecture (a CPU architecture), the frame register points to the stack frame (Frame Pointer, FP) of the current function, the return address of the current function is stored in the stack, and the address of the return address is stored relative to the stack of the current function The frame offset value is fixed. Then, according to the stack frame and the fixed offset value, the return address of the current function can be read out. In this cycle, the traceability of the function call relationship is completed. [0003] The terms involv...

AI Technical Summary

Problems solved by technology

The values ​​of function parameters and local variables are unpredictable. Once their values ​​are in the code segment, the brute force method considers this a function return address, resulting in low accuracy in determining the return address of the function in the function call relationship.

Images