lkml.org 
[lkml]   [2008]   [Feb]   [15]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
/
Date
SubjectLinux i386 clone(): %ebx 'frobbing' ?
From
Hi all,

In the clone(int (*fn)(void *arg), void *child_stack, ..., void *arg, ...)
Glibc library function defind in sysdeps/unix/sysv/linux/i386/:

`fn' is saved in 8(child_stack), and `arg' is stored in 12(child_stack):

movl STACK(%esp),%ecx
movl ARG(%esp),%eax /* no negative argument counts */
movl %eax,12(%ecx) <---

/* Save the function pointer as the zeroth argument.
It will be popped off in the child in the ebx frobbing below. */
movl FUNC(%esp),%eax
movl %eax,8(%ecx) <---

But after the exectuion of `sys_clone' system call, `fn' is
called in the child thread by the statement 'call *%ebx' as follows:

int $0x80
[...]

test %eax,%eax
jz L(thread_start)

/* Parent */
L(pseudo_end):
ret

/* Child */
L(thread_start):
/* Note: %esi is zero. */
movl %esi,%ebp /* terminate the stack frame */
call *%ebx

I don't understand how the `fn' argument reached the child thread
in the %ebx register. It's said in the comment that `fn' will be
popped to child 'in the ebx frobbing below'. But what does that mean ?

Thanks in advance

--
Ahmed S. Darwish
Homepage: http://darwish.07.googlepages.com
Blog: http://darwish-07.blogspot.com



\
 
 \ /
  Last update: 2008-02-15 19:47    [W:0.050 / U:0.036 seconds]
©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site