《coredump问题原理探究》Linux x86版6.4节虚函数

最新推荐文章于 2021-06-19 06:43:25 发布

debugeeker

最新推荐文章于 2021-06-19 06:43:25 发布

阅读量1.3k

点赞数

分类专栏： coredump问题原理探究(Linux版) 文章标签：调试技术 Linux C++ 汇编程序崩溃

本文链接：https://blog.csdn.net/xuzhina/article/details/42715807

版权

coredump问题原理探究(Linux版) 专栏收录该内容

44 篇文章 20 订阅

订阅专栏

在上一节已经探究了类的成员变量的排列，现在看一下虚函数表和成员变量的排列及虚函数之间的排列.

先看一个例子:

  1	 #include <stdio.h>
  2	 class xuzhina_dump_c06_s3
  3	 {
  4	     private:
  5	         int m_a;
  6	     public:
  7	         xuzhina_dump_c06_s3() { m_a = 0; }
  8	         virtual void inc() { m_a++; }
  9	         virtual void dec() { m_a--; }
 10	         virtual void print()
 11	         {
 12	             printf( "%d\n", m_a );
 13	         }
 14	 };
 15 
 16	 int main()
 17	 {
 18	     xuzhina_dump_c06_s3* test = new xuzhina_dump_c06_s3;
 19	     if ( test != NULL )
 20	     {
 21	         test->inc();
 22	         test->inc();
 23	         test->print();
 24	     }
 25	     return 0;
 26	 }

汇编代码：

(gdb) disassemble main
Dump of assembler code for function main:
   0x08048560 <+0>:     push   %ebp
   0x08048561 <+1>:     mov    %esp,%ebp
   0x08048563 <+3>:     push   %ebx
   0x08048564 <+4>:     and    $0xfffffff0,%esp
   0x08048567 <+7>:     sub    $0x20,%esp
   0x0804856a <+10>:    movl   $0x8,(%esp)
   0x08048571 <+17>:    call   0x8048450 <_Znwj@plt>
   0x08048576 <+22>:    mov    %eax,%ebx
   0x08048578 <+24>:    mov    %ebx,(%esp)
   0x0804857b <+27>:    call   0x80485cc <_ZN19xuzhina_dump_c06_s3C2Ev>
   0x08048580 <+32>:    mov    %ebx,0x1c(%esp)
   0x08048584 <+36>:    cmpl   $0x0,0x1c(%esp)
   0x08048589 <+41>:    je     0x80485c1 <main+97>
   0x0804858b <+43>:    mov    0x1c(%esp),%eax
   0x0804858f <+47>:    mov    (%eax),%eax
   0x08048591 <+49>:    mov    (%eax),%eax
   0x08048593 <+51>:    mov    0x1c(%esp),%edx
   0x08048597 <+55>:    mov    %edx,(%esp)
   0x0804859a <+58>:    call   *%eax
   0x0804859c <+60>:    mov    0x1c(%esp),%eax
   0x080485a0 <+64>:    mov    (%eax),%eax
   0x080485a2 <+66>:    mov    (%eax),%eax
   0x080485a4 <+68>:    mov    0x1c(%esp),%edx
   0x080485a8 <+72>:    mov    %edx,(%esp)
   0x080485ab <+75>:    call   *%eax
   0x080485ad <+77>:    mov    0x1c(%esp),%eax
   0x080485b1 <+81>:    mov    (%eax),%eax
   0x080485b3 <+83>:    add    $0x8,%eax
   0x080485b6 <+86>:    mov    (%eax),%eax
   0x080485b8 <+88>:    mov    0x1c(%esp),%edx
   0x080485bc <+92>:    mov    %edx,(%esp)
   0x080485bf <+95>:    call   *%eax
   0x080485c1 <+97>:    mov    $0x0,%eax
   0x080485c6 <+102>:   mov    -0x4(%ebp),%ebx
   0x080485c9 <+105>:   leave  
   0x080485ca <+106>:   ret    
End of assembler dump.

更多内容请关注微信公众号“debugeeker", 链接为https://mp.weixin.qq.com/s/kfIX6Kaflt1OkCGf4Sf6Fg