You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Currently rFLAGS view doesn't tell the state of at least TF and RF. One has to open Intel documentation and look what some bit stands for when he sees it set. Sometimes it's even worse: some flags are filtered in numeric value field, and the user sees incomplete (in fact, wrong) picture. I seem to remember that when I saw "sticky TF" problem in signal handlers and was trying to understand it, I had to use Dump State plugin to see the complete picture in EDB, because Register View didn't show me TF even in the numeric entry. I actually discovered that plugin only after seeing TF set in GDB, which finally made sense.
So this request is to avoid filtering information before presenting to the user.
The text was updated successfully, but these errors were encountered:
Currently
rFLAGS
view doesn't tell the state of at least TF and RF. One has to open Intel documentation and look what some bit stands for when he sees it set. Sometimes it's even worse: some flags are filtered in numeric value field, and the user sees incomplete (in fact, wrong) picture. I seem to remember that when I saw "sticky TF" problem in signal handlers and was trying to understand it, I had to use Dump State plugin to see the complete picture in EDB, because Register View didn't show me TF even in the numeric entry. I actually discovered that plugin only after seeing TF set in GDB, which finally made sense.So this request is to avoid filtering information before presenting to the user.
The text was updated successfully, but these errors were encountered: