2010-08-20 61 views
0

我想双转换为字符串在栈上从x86_64的汇编代码:如何从x86_64程序集调用sprintf?

 bs.code += isa.movsd(registers.xmm0, MemRef(registers.rsp)) 
     bs.code += isa.pop(registers.rax) 

     bs.code += isa.push(registers.rbp) 
     bs.code += isa.mov(registers.rbp, registers.rsp) 

     bs.code += isa.sub(registers.rsp, 100) 
     bs.code += isa.and_(registers.rsp, -16) 

     bs.code += isa.mov(registers.rdi, registers.rsp) 
     bs.code += isa.mov(registers.rsi, <address of "%i\0">) 
     bs.code += isa.mov(registers.rax, <address of sprintf in libc>) 
     bs.code += isa.call(registers.rax) 

call(rax)程序段错误与

Program received signal SIGSEGV, Segmentation fault. 
0x00007ffff6a2919b in *__GI___overflow (f=0x7fffffffb5d0, ch=9698128) at genops.c:248 
warning: Source file is more recent than executable. 
248 return _IO_OVERFLOW (f, ch); 

我认为sprintf必须要特别,因为它叫使用可变参数,所以任何人都可以建议正确的方式从汇编做到这一点?

回答

1

如果你在C中编写一个简单的调用sprintf并使用gcc -s foo.c,会有帮助吗?

+0

我试过这个,但必须做-fno-stack-protector才能得到简单的代码。 – 2010-08-20 22:41:48