6

I've tried to set breakpoint on every function that makes any sense but program exit before reaching any of those. Is there a way to make program run in step-by-step mode from the start so I can see what's going on?

I'm trying to debug /usr/bin/id if it's important (we have custom plugin for it and it's misbehaved)

P.S. Start command doesn't work for me here(it should be a comment, but I don't have enough rep for it)

2

4 Answers 4

7

Get the program entry point address and insert a breakpoint at that address.

One way to do this is to do info files which gives you for example "Entry point: 0x4045a4". Then do "break *0x4045a4". After run-ning program, it will immediately stop.

From here on you can use single stepping instructions (like step or stepi) to proceed.

You did not tell what system you are trying to debug. If code is in read-only memory you may need to use hardware breakpoints (hbreak) if they are supported by that system.

3
  • The set break command seems to do something else at least in GDB 7.7.1 - it expects a subcommand rather than an address. Perhaps, you meant break *0x4045a4?
    – JSmyth
    Commented May 24, 2015 at 10:54
  • Sure. break not set break. Fixing answer.
    – dbrank0
    Commented May 24, 2015 at 17:54
  • 1
    On Fedora 27, this works for Xorg which is exempted from building as PIE etc, but it does not work for most binaries e.g. gnome-shell. "Cannot insert breakpoint 1. Cannot access memory at address 0x2540". break _start will often work though (for C code, and I guess if the dynamic linker doesn't crash first).
    – sourcejedi
    Commented Mar 28, 2018 at 11:59
6

Use starti. Unlike start this stops at the actual first instruction, not at main().

1
  • This is the most useful answer. It works unconditionally for all programs, and it doesn't need any prior knowledge of the entry point address.
    – pts
    Commented May 6, 2023 at 15:18
5

Use start command

The ‘start’ command does the equivalent of setting a temporary breakpoint at the beginning of the main procedure and then invoking the ‘run’ command.

e.g.

a program with debug info main, and usage like this: main arg1 arg2

gdb main
(gdb) start arg1 arg2
2
  • 2
    This will work only if a program has the main symbol. If you are debugging a piece of assembly that won't work.
    – JSmyth
    Commented May 24, 2015 at 10:49
  • 1
    It also doesn't help if you have an issue before main().
    – Timmmm
    Commented Jul 7, 2022 at 12:55
1

You can type record full right after running the program. This will record all instructions and make them possible for replaying/going back.

For main function, you'd need to type this before reaching the breakpoint so you can set an earlier one by break _start -> _start is a function always called before the standard main function. (apparently applies only to the gcc compiler or similar)

Then continue to main breakpoint and do reverse-stepi to go exactly one instruction back

For more info about recording look here: link

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.