问题描述
我正在尝试读取传递给我的可执行文件的文件名,并使用程序集写入该文件.它编译没有错误,但是在执行时失败.我的代码到底有什么问题?
I'm and trying to read a filename passed to my executable and write to that file using assembly. It compiles without error but fails when executed. What is wrong with my code exactly?
BITS 32
segment .data
text db "text"
segment .text
global main
main:
pop ebx
pop ebx
pop ebx ; pop pointer to filename into ebx
mov eax,0x5 ;syscall open
mov ecx,0x2 ;flag read/write
int 0x80 ;call kernel
mov ebx,eax ;save returned file descriptor
mov eax,0x4 ; write syscall
mov ecx,text ;mov pointer to text into ecx
mov edx,0x4 ;string length
int 0x80 ;exit syscall
mov eax,0x1
int 0x80
推荐答案
由于从libc中被调用,您还必须记住您有回信地址,以便可以返回那里.这与仅拥有一个简单的汇编程序(如很多教程!)所得到的不同.考虑到这一点:
Since you're being called from libc you also have to recall that you have return address so you could return there. This is unlike what you get if you just have a bare-bones assembly program (like a lot of tutorials!). With that in mind:
pop ebx ;; pops return address to libc caller (_start usually)
pop ebx ;; pops argc
pop ebx ;; pops argv !!WAS!!: ; pop pointer to filename into ebx
在这里,您可以打印第一个参数.您应该可以从那里去(注意:我可能犯了错误):
Here's how you can print the first argument. You should be able to go from there (beware: I might have made mistakes):
BITS 32
section .text
global main
extern strlen
main:
pop ecx ; Return address
pop ecx ; argc
pop ecx ; argv
mov ecx, [ecx+4] ; argv[1]
push ecx
call strlen
mov edx, eax ; count
pop ecx ; buf
mov eax, 4 ; sys_write
mov ebx, 1 ; stdout
int 0x80
mov eax, 1 ; sys_exit
mov ebx, 0 ; status
int 0x80
这篇关于通过x86汇编从argv读取文件名的文章就介绍到这了,希望我们推荐的答案对大家有所帮助,也希望大家多多支持!