• by saagarjha on 6/25/2018, 3:47:29 PM

    > By convention, the stack is between the value of registers rbp (lower address) and rsp (higher address) and rsp increases when there are more stack frames added. We're on 64-bit Linux so each frame takes up 8 bytes.

    Stack frames grow in size based on local variables allocated on the stack. And $rbp and $rsp need not point at the correct places in the stack for leaf functions, at least on Linux, because it uses the System V ABI.

  • by aleden on 6/25/2018, 2:06:18 PM

    Where's part one? Author states "Last time", but that hyperlink just goes to the same page it's on.

    https://blog.asrpo.com/making_a_low_level_debugger_part_1 gives 404