All Questions
2
questions
1
vote
1
answer
2k
views
why saved rip changed by push？
I am doing a reverse homework. see the following pictures:
as can be seen from this picture, before call push touch3, "saved rip" is at 0x5561dca8, which is equal to the current rsp(0x5561dca8).
...
- 19
3
votes
1
answer
3k
views
gdb setting fs register on Linux
I'm debugging an ELF 64-bit binary using gdb and I notice that the %fs register is set to 0x63. For some testing that I'd like to perform I'd like to set the %fs register to 0x00.
I tried doing a set ...
user1743