Welcome to the new Woodmann RCE Messageboards Regroupment
Please be patient while the rest of the site is restored.

To all Members of the old RCE Forums:
In order to log in, it will be necessary to reset your forum login password ("I forgot my password") using the original email address you registered with. You will be sent an email with a link to reset your password for that member account.

The old vBulletin forum was converted to phpBB format, requiring the passwords to be reset. If this is a problem for some because of a forgotten email address, please feel free to re-register with a new username. We are happy to welcome old and new members back to the forums! Thanks.

All new accounts are manually activated before you can post. Any questions can be PM'ed to Kayaker.

EDB Linux Debugger 0.9.0 Release :)

RCE of Linux tools and programs.
proxy
Member
Posts: 85
Joined: Tue Jun 13, 2006 3:59 pm
Contact:

Post by proxy »

I want to ask which linux platform such as redhat or other suit for this good tool with QT4 opensource X11.
I'm sorry, but I'm unclear on what you are asking. I think you are trying to ask which distribution EDB is "supported" on. In which case, just about any modern (2.6 kernel) one will do if it has QT 4.2 or greater. Ubuntu is a good distro, simple to setup and use. I'm a bit partial to Gentoo, but it requires a large time investment.

If this wasn't your question, please rephrase and I'll try to give you what you need.

proxy
gxlly

Post by gxlly »

Thank you very much,I will test Ubuntu.
I use RedHat AS3 with QT4.4.1,but it is failed.
proxy
Member
Posts: 85
Joined: Tue Jun 13, 2006 3:59 pm
Contact:

Post by proxy »

You should be more clear by what you mean "it is failed." Does it not compile? Did you install the qt4-devel packages? Does it not run? In either case, please provide some error output.

proxy
gxlly

Post by gxlly »

I compile it and run it now,thanks.
proxy
Member
Posts: 85
Joined: Tue Jun 13, 2006 3:59 pm
Contact:

Post by proxy »

It's that time again :) Another edb release.


2008-09-29
----------

* Added context menu to Symbol viewer's list so that you can select where to
view the symbol in.

* Added a plugin managment window. Currently, it just lets you see what's been
loaded. But in the future, I will try to make it so you can disable/enable
different plugins.

2008-08-29
----------

* Attempt #2 at making the /lib/ vs. /lib64/ automatic for 64-bit platforms. I
think the new solution should work.

2008-08-25
----------

* Added the ability for edb to get the base of the GS and FS segments. This
allows the instruction analyzer to correctly display the values of certain
expressions. This also makes segments valid in expressions, they will resolve
to the base of the segment. Though CS/DS/ES/SS will always resolve to 0.
One nice trick is that you can break on each system call by puting a
breakpoint on [gs+0x10] (though 0x10 may vary from system to system).

2008-08-16
----------

* Finished making the Heap Analyzer plugin work on x86-64.

enjoy

http://www.codef00.com/projects.php#Debugger

proxy
User avatar
dELTA
Posts: 4209
Joined: Mon Oct 30, 2000 7:00 am
Location: Ring -1

Post by dELTA »

Nice progress as usual. :yay:
"Give a man a quote from the FAQ, and he'll ignore it. Print the FAQ, shove it up his ass, kick him in the balls, DDoS his ass and kick/ban him, and the point usually gets through eventually."
proxy
Member
Posts: 85
Joined: Tue Jun 13, 2006 3:59 pm
Contact:

Post by proxy »

W00t, 0.9.6 is out the door :) Mostly minor updates, but a few things that possibly bugged people should be fixed.

2008-11-14
----------

* Improved the ebuild on 64-bit platforms.

* Fixed search and replace error with default plugin path, it should work
correctly now.

* Minor improvements to the html documentation.

2008-10-20
----------

* Right clicking in the register view will no longer show "Follow In ___"
options for things such as segments, eflags and FPU values. these do not
have meaningful values as addresses.

2008-10-14
----------

* Fixed a bug where some old stub code from before the 64-bit port was breaking
any instructions which use the FS or GS segments :( .

* Made the find ascii string routines more intelligent about what they consider
to be an "ascii" character. The output is a lot more comparable to the unix
strings command.

2008-10-08
----------

* Switched from edb::v1::log to qDebug. The nice thing about this is that it
functions very much the same as my old logging. But also supports stream
oriented logging. Finally, it is "hookable" so that a widget could be used to
show the logging in a widget if we want.

* Made several string displays a bit more unicode friendly. This most visibly
results in "high" ascii characters no longer appearing as junk.

2008-10-06
----------

* Started prepping the code for internationalization, this will be an ongoing
process. Once the process is started and I have at least one non-english
translation, then it will be helpful if people report un-translated strings.
But we aren't quite ready for that yet ;) .

* Fixed a 64-bit compatibility bug in the breakpoint plugin.

* Sped up heap analyzer a lot by disabling updates during population.

2008-10-01
----------

* Fixed a bug introduced in last version where several entries for 0x00000000
were be entered in the function finder plugin. This was actually a bug in
the analysis engine where I failed to notice the side effects of reading a
map using the [] syntax.

* Made it so the symbol viewer plugin will by default open up symbols for code
in the disassembly and data in the data views when double clicked.

* Vastly improved the analyzer's handling of symbol information in its function
search algorithm.

enjoy

http://www.codef00.com/projects.php#Debugger

proxy
Ricardo Narvaja
Senior Member
Posts: 943
Joined: Tue Mar 11, 2003 12:45 pm

Post by Ricardo Narvaja »

two easy tutorials in spanish of installing and using edb debugger (and IDA) in linux, i think write more in this theme.

http://ricardonarvaja.info/WEB/OTROS/AP ... N%20LINUX/

ricardo narvaja
proxy
Member
Posts: 85
Joined: Tue Jun 13, 2006 3:59 pm
Contact:

Post by proxy »

Fantastic, any chance you could have versions that are translated to english? Also would you be interested in adding translation files for edb?
Ricardo Narvaja
Senior Member
Posts: 943
Joined: Tue Mar 11, 2003 12:45 pm

Post by Ricardo Narvaja »

well i don't speak in english for make a translation, but if any is interested in translating, there are no problem at all.

thanks for this good tool, EDB is improving each version, good job.
best regards
ricnar
Previnlin
Junior Member
Posts: 7
Joined: Thu Dec 04, 2008 10:38 pm

Post by Previnlin »

Dear proxy,

When I try to compiler 0.9.6 version edb, it reports errors below:

cd src/ && make -f Makefile
make[1]: Entering directory `/rh/ixd/tool_test/temp/evan/debugger/src'
g++ -c -m64 -pipe -O2 -Wall -W -D_REENTRANT -DQT_NO_DEBUG -DQT_GUI_LIB -DQT_CORE_LIB -DQT_SHARED -I/usr/lib64/qt44/mkspecs/linux-g++-64 -I. -I/usr/lib64/qt44/include/QtCore -I/usr/lib64/qt44/include/QtCore -I/usr/lib64/qt44/include/QtGui -I/usr/lib64/qt44/include/QtGui -I/usr/lib64/qt44/include -I../include -Iwidgets -Ios/unix -I../include/os/unix -Iarch/x86_64 -I../include/arch/x86_64 -I../include/arch/x86_64/edisassm -I. -I. -o SymbolManager.o SymbolManager.cpp
In file included from ../include/arch/x86_64/edisassm/Instruction.h:1249,
from ../include/arch/x86_64/ArchTypes.h:24,
from ../include/Types.h:23,
from ../include/SymbolManager.h:27,
from SymbolManager.cpp:20:
../include/arch/x86_64/edisassm/Instruction.tcc:678: expected 1 levels of
template parms for `void Instruction<N>::decode(const uint8_t*)', got 2
../include/arch/x86_64/edisassm/Instruction.tcc:689: redefinition of `void
Instruction<N>::decode(const uint8_t*)'
../include/arch/x86_64/edisassm/Instruction.tcc:678: `void
Instruction<N>::decode(const uint8_t*)' previously declared here
../include/arch/x86_64/edisassm/Instruction.tcc:689: no `void
Instruction<N>::decode(const uint8_t*)' member function declared in class `
Instruction<N>'
../include/arch/x86_64/edisassm/Instruction.tcc:689: expected 1 levels of
template parms for `void Instruction<N>::decode(const uint8_t*)', got 2
../include/arch/x86_64/edisassm/Instruction.tcc:699: redefinition of `void
Instruction<N>::decode(const uint8_t*)'
../include/arch/x86_64/edisassm/Instruction.tcc:678: `void
Instruction<N>::decode(const uint8_t*)' previously declared here
../include/arch/x86_64/edisassm/Instruction.tcc:699: no `void
Instruction<N>::decode(const uint8_t*)' member function declared in class `
Instruction<N>'
../include/arch/x86_64/edisassm/Instruction.tcc:699: expected 1 levels of
template parms for `void Instruction<N>::decode(const uint8_t*)', got 2
../include/arch/x86_64/edisassm/Instruction.tcc:2076: redefinition of `void
Instruction<N>::decode(const uint8_t*)'
../include/arch/x86_64/edisassm/Instruction.tcc:678: `void
Instruction<N>::decode(const uint8_t*)' previously declared here
../include/arch/x86_64/edisassm/Instruction.tcc:2076: no `void
Instruction<N>::decode(const uint8_t*)' member function declared in class `
Instruction<N>'
make[1]: *** [SymbolManager.o] Error 1
make[1]: Leaving directory `/rh/ixd/tool_test/temp/evan/debugger/src'
make: *** [sub-src-make_default] Error 2

My system:

<1>Red Hat Enterprise Linux AS release 3 (Taroon Update 6)
<2>QMake version 2.01a
Using Qt version 4.4.3 in /usr/lib64/qt44/lib
proxy
Member
Posts: 85
Joined: Tue Jun 13, 2006 3:59 pm
Contact:

Post by proxy »

could you please post the version of g++ you are using. I beleive this to be an issue with older gcc's (i experienced it when using mingw which is based on gcc 3.x).

Thanks,
proxy
Previnlin
Junior Member
Posts: 7
Joined: Thu Dec 04, 2008 10:38 pm

help: make[1]: *** [SymbolManager.o] Error 1

Post by Previnlin »

Dear proxy,

When I try to compiler 0.9.6 version edb, it reports errors below:

cd src/ && make -f Makefile
make[1]: Entering directory `/rh/ixd/tool_test/temp/evan/debugger/src'
g++ -c -m64 -pipe -O2 -Wall -W -D_REENTRANT -DQT_NO_DEBUG -DQT_GUI_LIB -DQT_CORE_LIB -DQT_SHARED -I/usr/lib64/qt44/mkspecs/linux-g++-64 -I. -I/usr/lib64/qt44/include/QtCore -I/usr/lib64/qt44/include/QtCore -I/usr/lib64/qt44/include/QtGui -I/usr/lib64/qt44/include/QtGui -I/usr/lib64/qt44/include -I../include -Iwidgets -Ios/unix -I../include/os/unix -Iarch/x86_64 -I../include/arch/x86_64 -I../include/arch/x86_64/edisassm -I. -I. -o SymbolManager.o SymbolManager.cpp
In file included from ../include/arch/x86_64/edisassm/Instruction.h:1249,
from ../include/arch/x86_64/ArchTypes.h:24,
from ../include/Types.h:23,
from ../include/SymbolManager.h:27,
from SymbolManager.cpp:20:
../include/arch/x86_64/edisassm/Instruction.tcc:678: expected 1 levels of
template parms for `void Instruction<N>::decode(const uint8_t*)', got 2
../include/arch/x86_64/edisassm/Instruction.tcc:689: redefinition of `void
Instruction<N>::decode(const uint8_t*)'
../include/arch/x86_64/edisassm/Instruction.tcc:678: `void
Instruction<N>::decode(const uint8_t*)' previously declared here
../include/arch/x86_64/edisassm/Instruction.tcc:689: no `void
Instruction<N>::decode(const uint8_t*)' member function declared in class `
Instruction<N>'
../include/arch/x86_64/edisassm/Instruction.tcc:689: expected 1 levels of
template parms for `void Instruction<N>::decode(const uint8_t*)', got 2
../include/arch/x86_64/edisassm/Instruction.tcc:699: redefinition of `void
Instruction<N>::decode(const uint8_t*)'
../include/arch/x86_64/edisassm/Instruction.tcc:678: `void
Instruction<N>::decode(const uint8_t*)' previously declared here
../include/arch/x86_64/edisassm/Instruction.tcc:699: no `void
Instruction<N>::decode(const uint8_t*)' member function declared in class `
Instruction<N>'
../include/arch/x86_64/edisassm/Instruction.tcc:699: expected 1 levels of
template parms for `void Instruction<N>::decode(const uint8_t*)', got 2
../include/arch/x86_64/edisassm/Instruction.tcc:2076: redefinition of `void
Instruction<N>::decode(const uint8_t*)'
../include/arch/x86_64/edisassm/Instruction.tcc:678: `void
Instruction<N>::decode(const uint8_t*)' previously declared here
../include/arch/x86_64/edisassm/Instruction.tcc:2076: no `void
Instruction<N>::decode(const uint8_t*)' member function declared in class `
Instruction<N>'
make[1]: *** [SymbolManager.o] Error 1
make[1]: Leaving directory `/rh/ixd/tool_test/temp/evan/debugger/src'
make: *** [sub-src-make_default] Error 2

My system:

<1>Red Hat Enterprise Linux AS release 3 (Taroon Update 6)
<2>QMake version 2.01a
Using Qt version 4.4.3 in /usr/lib64/qt44/lib

Thanks a lot in advance,
Previn
proxy
Member
Posts: 85
Joined: Tue Jun 13, 2006 3:59 pm
Contact:

Post by proxy »

Just to be sure you got my last post, please post your g++ version. I beleive that is all I need to confirm what I think the problem is.

proxy
Previnlin
Junior Member
Posts: 7
Joined: Thu Dec 04, 2008 10:38 pm

Post by Previnlin »

Dear Proxy,

Thanks for your quick reply. I'm sorry I can't access the computer at present, the gcc is default when installing the OS, although can't remember clearly, yes, just as your said, it should be 3.xx version, any suggestion for gcc version? I'll try to test it tomorrow and give update.

Thanks again,
Previn
Locked