Skip to content
Evan Teran edited this page Dec 2, 2019 · 4 revisions

Screenshot

The stack view is very similar to the Data View, in fact, it is based on the same widget. The primary differences are that it will adjust to show the data at the stack pointer on each update, and it will try to show strings and control flow data when it can.

Control flow data is currently determined by looking at the bytes preceding the potential return address if those bytes look like a call, edb will assume that a call put that value on the stack.

Clone this wiki locally