📚 OpenRCE is preserved as a read-only archive. Launched at RECon Montreal in 2005. Registration and posting are disabled.








Flag: Tornado! Hurricane!

 Forums >>  IDA Pro  >>  IDA Pro x64 Linux sigsegv While Single Stepping Calls

Topic created on: January 16, 2008 23:26 CST by sailoreda .

'm using IDA Pro v5.2 to debug an x86-64 program in linux.
I'm using the native IDA Pro version for linux. My problem is when I start to debug.

The problem happens when I set a breakpoint. After the breakpoint hits, I can single step some instructions but not function calls. When I single step over or into a function call, I get a sigsegv warning. Some instructions like pop also give a sigsegv fault. It is really strange because I can move my breakpoint to right after the function call and if I restart the debugging session, everything works fine that is until I have another function call. However, the entire program properly executes under the debugger as long as there aren't any breakpoints.

I've played with various debug options and none of them seem to work. I've got the same code in x86 and using the 32bit version of ida, the single stepping works fine. This problem is only with the 64bit version. The same error happens if I try to do a remote debug session from windows.

thanks,

Sailor

  PSUJobu     January 17, 2008 06:19.37 CST
As with so many other posts here on OpenRCE, this sounds like a perfect issue to raise as a bug report to Hex-Rays.  Hmm, I wonder why so many IDA Pro "users" are hesitant to use the excellent support provided by Datarescue, and now Hex-Rays?  We've had multiple issues -- including ones with far less impact than what you describe -- resolved quickly over the years by Ilfak and co.

  aeppert     January 17, 2008 08:47.03 CST
Just to hammer this point home a bit more ... (poor horse)

Again, as I have said before, if you have a valid license and you are encountering a bug (or one you think is!), Hex-Rays is still staffed by the same brilliant individuals as Datarescue, that will be more than happy to resolve the problem.

Ilfak is still the man in charge of IDA Pro development as he has been since day zero, thus you can rest assured if he can reproduce the problem you will have a patch inside a day.  He is absolutely courteous and amazingly helpful for someone who is quite busy - all at once very refreshing and disconcerting as I have no clue how in the world he sleeps.

So, in short, fire an email to support at Hex-Rays and they will be appropriately able to fix any problems provided you give them the requisite information.

  PSUJobu     January 17, 2008 12:56.22 CST
Yeah, I wonder how (or if) he sleeps, too.  It has become even more amazing as we've deluged him with both Hex-Rays and IDA Pro requests / reports.  :)  That man is amazing...  And to think that he's married with kids, if memory serves me...

  sailoreda   January 17, 2008 18:50.32 CST
Got a patch from Ilfak for this - rather quick service I would say.

  PSUJobu     January 23, 2008 05:17.36 CST
Glad to hear it, and glad to hear that you're perhaps the exception to the rule...  As I implied above (in your case, it apparently does not apply) a lot of the IDA Pro support requests on OpenRCE come from those without legitimate IDA Pro licenses (crackers and the like).  Three cheers to Hex-Rays for their usual excellent support, and three to you as well for being a "real" customer!  ;-)

For those of you who haven't experienced it, Hex-Rays provides the same great level of support that we enjoyed from Datarescue.  Little wonder, since we're talking about the same dedicated developers...

Note: Registration is required to post to the forums.

There are 31,328 total registered users.


Recently Created Topics
[help] Unpacking VMP...
Mar/12
Reverse Engineering ...
Jul/06
let 'IDAPython' impo...
Sep/24
set 'IDAPython' as t...
Sep/24
GuessType return une...
Sep/20
About retrieving the...
Sep/07
How to find specific...
Aug/15
How to get data depe...
Jul/07
Identify RVA data in...
May/06
Question about memor...
Dec/12


Recent Forum Posts
Finding the procedur...
rolEYder
Question about debbu...
rolEYder
Identify RVA data in...
sohlow
let 'IDAPython' impo...
sohlow
How to find specific...
hackgreti
Problem with ollydbg
sh3dow
How can I write olly...
sh3dow
New LoadMAP plugin v...
mefisto...
Intel pin in loaded ...
djnemo
OOP_RE tool available?
Bl4ckm4n


Recent Blog Entries
halsten
Mar/14
Breaking IonCUBE VM

oleavr
Oct/24
Anatomy of a code tracer

hasherezade
Sep/24
IAT Patcher - new tool for ...

oleavr
Aug/27
CryptoShark: code tracer ba...

oleavr
Jun/25
Build a debugger in 5 minutes

More ...


Recent Blog Comments
nieo on:
Mar/22
IAT Patcher - new tool for ...

djnemo on:
Nov/17
Kernel debugger vs user mod...

acel on:
Nov/14
Kernel debugger vs user mod...

pedram on:
Dec/21
frida.github.io: scriptable...

capadleman on:
Jun/19
Using NtCreateThreadEx for ...

More ...


Imagery
SoySauce Blueprint
Jun 6, 2008

[+] expand

View Gallery (11) / Submit