edb-debugger icon indicating copy to clipboard operation
edb-debugger copied to clipboard

Outlined stack frames in stack view.

Open GoogleCodeExporter opened this issue 9 years ago • 1 comments

  • Recognize and outline stack frames in the stack view.

(OllyDbg does this and it really helps keeping track of everything in the stack)

The stack frames could be outlined the same way that functions are in code view.

One difference from the analyzer plugin function recognition would be that this plugin would operate during runtime (on each step into/step over) and would not analyze the stack. This would also help remove false positives.

For instance:

  • When a 'call' is made, begin to outline the stack frame of the new function.
  • When 'sub esp, 8' is made, extend the already outlined stack frame of the current function.
  • And of cause remove the outlined stack frame on a 'leave' or 'ret'. ...

I've attached a screenshot to show you what i had in mind.


Want to back this issue? Post a bounty on it! We accept bounties via Bountysource.

GoogleCodeExporter avatar Mar 29 '15 00:03 GoogleCodeExporter

I like this suggestion. I'll plan to have it at some point in the near future. Unfortunately it is not quite as simple to implement as you suggest. While you suggestion would work, it would only work in the case of stepping. I would also want it to show correctly when the program was running and you stop too.

At the very least, I could try to frame out the area between two returns which should be approximately correct. I'll look into it.

GoogleCodeExporter avatar Mar 29 '15 00:03 GoogleCodeExporter