tags:

views:

30

answers:

1

Given a void *eip and an array of struct function symbols that contain the address, symbolic name, and binding of all function symbols in the file, how do I determine the function running at the time of the error?

A: 

If the executing module isn't relocated at runtime, you could probably try to check if your EIP lies between two function addresses in your function symbols.

JPD002