Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Improve GEF running under winedbg #1100

Draft
wants to merge 1 commit into
base: main
Choose a base branch
from

Conversation

clubby789
Copy link
Contributor

Description

Currently a draft as I'd like to improve this further but looking for initial feedback 🙂 I'm not sure of the order in which hooks are run by GDB - in this current version, GEF tries to run context, fails due to no arch being setup yet, then runs architecture detection.

  • Adds a check for running under winedbg as an alternate remote session mode
  • Parses the monitor mem output provided by winedbg
  • Adds i386 as an alias of X86

GEF is currently awkward to use for debugging programs under Wine (specifically winedbg --gdb mode). This is mostly due to incorrect architecture.

image

Copy link

github-actions bot commented May 6, 2024

🤖 Coverage update for b77fd79 🟢

Old New
Commit 18c1f7c b77fd79
Score 71.5629% 71.5629% (0)

@clubby789 clubby789 force-pushed the wine-improvements branch from b77fd79 to b15d41b Compare May 8, 2024 12:39
Copy link

github-actions bot commented May 8, 2024

🤖 Coverage update for b15d41b 🟢

Old New
Commit 18c1f7c b15d41b
Score 71.5629% 71.5629% (0)

@therealdreg
Copy link
Collaborator

therealdreg commented Jun 4, 2024

This PR will be very useful for CTF players, feel free to ask us!

If you have any questions about architectures and delicate matters, you can ask to @hugsy @Grazfather

Remember that GEF is a "very stable" project. Don't forget to add a lot of tests to ensure the quality of support for Wine.

thanks @clubby789 !

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants