Question

I know that you can find any parameters by looking at a positive offset from $ebp using gdb:

(gdb) x/4wx $ebp

Then, I would look at the 3rd and 4th addresses using x/s because they would be the first and second parameter. What about for local variables? How would I look at the values at a negative offset from $ebp?
Also, is there anyway to look at the value of $eax?
Whenever I try to print the value of $eax using x/s $eax, the address is out of bound or the value is 0, which I am sure that it is not because I just put a constant value in the register.

I tried info locals but I get the message “No symbol table info available”.

Answer 1

First you need to compile debugging the symbols into your binary. Use the -g option on gcc with your current command to do this. If you’re using a different compiler you will need to consult its documentation. After this, ‘info locals’ and the print command will work.

To look at any local variable all you need to do is use the ‘print’ command. For example to look at the local variable ‘i’ it’s as easy as ‘print i’.

You should be able to handle $eax in the same way as $ebp. I suspect you have problems because you’re using x/s. x/s will try and print out a string, and so it will continue until it hits a null character. If this doesn’t happen for a long time then the length of the string will go out of bounds. Try ‘x/d $eax’. You can even do ‘print $eax’. You can also use ‘info registers’ to get all the register data.