Re: Coredump Without Much Info?

[Hei Chan <structurechart () yahoo com>]

(gdb) disassemble pcap_nextDump of assembler code for function pcap_next:   0x00007ffff715a040 <+0>: sub    
$0x28,%rsp=> 0x00007ffff715a044 <+4>: mov    0x260(%rdi),%rdx   0x00007ffff715a04b <+11>: lea    0x18(%rsp),%rax   
0x00007ffff715a050 <+16>: mov    %rsi,(%rsp)   0x00007ffff715a054 <+20>: mov    %rsp,%rcx   0x00007ffff715a057 <+23>: 
mov    $0x1,%esi   0x00007ffff715a05c <+28>: mov    %rdi,0x10(%rsp)   0x00007ffff715a061 <+33>: mov    %rax,0x8(%rsp)   
0x00007ffff715a066 <+38>: callq  0x7ffff7150de8 <pcap_dispatch@plt>   0x00007ffff715a06b <+43>: mov    %eax,%edx   
0x00007ffff715a06d <+45>: xor    %eax,%eax   0x00007ffff715a06f <+47>: test   %edx,%edx   0x00007ffff715a071 <+49>: jle 
   0x7ffff715a078 <pcap_next+56>   0x00007ffff715a073 <+51>: mov    0x18(%rsp),%rax   0x00007ffff715a078 <+56>: add    
$0x28,%rsp   0x00007ffff715a07c <+60>: retq   End of assembler dump.(gdb) 
 


     On Saturday, July 11, 2015 5:32 AM, Guy Harris <guy () alum mit edu> wrote:
   

 
On Jul 10, 2015, at 7:53 AM, Hei Chan <structurechart () yahoo com> wrote:

> I am using libpcap 1.4.0 to read in pcap.
> And my application crashed at pcap_next() when it read the first packet from my pcap file:(gdb) bt#0  
> 0x00007ffff715a044 in pcap_next () from /usr/lib64/libpcap.so.1

What does "disassemble pcap_next" print?


  
_______________________________________________
tcpdump-workers mailing list
tcpdump-workers () lists tcpdump org
https://lists.sandelman.ca/mailman/listinfo/tcpdump-workers