On Tue, Nov 4, 2008 at 11:50 AM, Vimal <j.vimal@xxxxxxxxx> wrote: > Hi, > >> >> But in essence, there aren several modes of ptracing: >> 1. single stepping. this is done by enabling debug flag (if I remember >> correctly) or replacing next instruction with INT 0x3h >> > > I don't get it. INT 3 is a break point setter. Why would we need it for ptrace? > yes correct....one breakpoint one 0xcc (int 3). so if u set 1000 bp, then 1000 0xcc will be inserted into the debuggee process image. upon encountering the int3, processing will flow to the debugging process. and this flowback is in the framework of how ptrace work....my explanation correct - Mulyadi? > -- > Vimal -- Regards, Peter Teoh -- To unsubscribe from this list: send an email with "unsubscribe kernelnewbies" to ecartis@xxxxxxxxxxxx Please read the FAQ at http://kernelnewbies.org/FAQ