Given a void *eip and an array of struct function symbols that contain the address, symbolic name, and binding of all function symbols in the file, how do I determine the function running at the time of the error?
A:
If the executing module isn't relocated at runtime, you could probably try to check if your EIP lies between two function addresses in your function symbols.
JPD002
2010-05-29 04:36:43