CODEWITHSUNDEEP
c++windows
Billy ONeal
Billy ONeal

Reputation: 106549

How can I get a stack trace of a remote (that is, not within my process) thread?

Let's say I'm writing a debugger. How do I build a stack trace on Windows systems? I don't need to enumerate symbols and such; just the addresses of the various function calls on the stack. I already have a handle to the thread with VM_READ access.

Upvotes: 2

Views: 426

Answers (1)

Bukes
Bukes

Reputation: 3718

Billy,

DBGHELP.DLL is your friend here. All sorts of useful functions for those who wish to perform debugger like activities...

In it you find goodies like StackWalk64 and others that allow you to specify the target process to manipulate. Of course, you'll likely need to ensure that your debugger process has SeDebugPrivilege granted upon itself.

Have fun!

Upvotes: 2

Related Questions