Suppose a C/C++ program has been stripped of its debugging symbols before shipme

Question

Suppose a C/C++ program has been stripped of its debugging symbols before shipment. What will happen when an analyst attempts to attach a debugger to the program during reverse engineering? a. The analyst will only be able to use the debugger's breakpoint-by-name functionality on calls to shared library functions b. The analyst will not be able to set any breakpoints at all c. The analyst will be unable to see the contents of the registers d. The analyst will still be able to set hardware breakpoints, but not software breakpoints e. The debugger will refuse to attach to the program due to the missing debug symbols

Explanation / Answer

Answer: (d) The analyst will still be able to set hardware breakpoints, but not software breakpoints

Why? Breakpoints are controlled by the processor but at the request of the debugger and software breakpoints can only be set on executable code and program data.

Related Questions

Navigate

• Browse (All)
• Browse S
• Subjects

---

---

Integrity-first tutoring: explanations and feedback only — we do not complete graded work. Learn more.