反向调试
Radare2 has reverse debugger, that can seek program counter backward. (e.g. reverse-next, reverse-continue in gdb) Firstly you need to save program state at the point that you want to start recording. The syntax for recording is:
You can use dts commands for recording and managing program states. After recording the states, you can seek pc back and forth to any points after saved address. So after recording, you can try single step back:
When you run dsb, reverse debugger restore previous recorded state and execute program from it until desired point.
Or you can also try continue back:
dcb seeks program counter until hit the latest breakpoint. So once set a breakpoint, you can back to it any time.
You can see current recorded program states using dts:
NOTE: Program records can be saved at any moments. These are diff style format that save only different memory area from previous. It saves memory space rather than entire dump.
And also can add comment:
You can leave notes for each records to keep in your mind. dsb and dcb commands restore the program state from latest record if there are many records.
Program records can exported to file and of course import it. Export/Import records to/from file:
Moreover, you can do reverse debugging in ESIL mode. In ESIL mode, program state can be managed by aets commands.
And step back by aesb:
最后更新于
这有帮助吗？