How can I find the places of system calls of my program?

Question

From strace manual:

-i Print the instruction pointer at the time of the system call.

I straced my programm:

strace -i prog

As a result I got a lot of system calls. One of them:

[000da49c] open("./rabbit.o", O_RDONLY) = 3

But disassembled instruction at this address of prog doesn't call any syscall (hte editor):

da49c !   mov         r7, ip

What is wrong? How can I find the places of system calls of my program?

P.S. Architecture of my device doesn't support GDB-command catch syscall.

flolo · Accepted Answer · 2012-04-05 11:25:30Z

2

To cite the Bugs section of the "strace" man-page:

The -i option is weakly supported.

Another tip which might help you: Do you looked at the previous code? The IP at point of putting it out, already points to the NEXT instruction, after the syscall. So you should check the instruction before da49c.

answered Apr 5, 2012 at 11:25

flolo

15.7k4 gold badges34 silver badges57 bronze badges

Sign up to request clarification or add additional context in comments.

1 Comment

Lucky Man Over a year ago

it is: da498 ! svc 0x00000000 . It could be syscall I should check it. Thank you for reply.

Collectives™ on Stack Overflow

How can I find the places of system calls of my program?

1 Answer 1

1 Comment

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

1 Comment

Related