Linux kernel-汇编基础

标签：include   存在   and   cat   寄存器   重要   register   $0   inux   

mov

ASSEMABLE            C LANGUAGE
movl %eax,%edx     edx = eax;                --->register mode
movl $0x123,%edx   edx = 0x123;              --->immediate (0x123 is a value)
movl 0x123,%edx    edx = *(int32_t *)0x123   --->direct (0x123 is memory address)
movl (%ebx),%edx   edx = *(int32_t *)ebx     --->indirect (fetch address from register ebx, and fetch the value from the address )
movl 4(%ebx),%edx  edx = *(int32_t *)(ebx+4) --->displaced (address from register and offset)

movb
movw
movl
movq
b,w,l,q:  8bit, 16bit, 32bit, 64bit

几个重要指令pushl, popl, call, ret

pushl %eax  ==  subl $4, %esp
                movl %eax, (%esp)

popl %eax  ==  movl (%esp), %eax
               addl $4, %esp

call 0x12345 == pushl %eip(*)
                movl $0x12345, %eip(*)

ret          == popl %eip(*)                                 

push - 栈顶地址减少8个字节(64位,如果32位就是4个字节)
pop - 栈顶地址增加8个字节(64位)

cs寄存器: 代码段寄存器
cs:rip - 总是指向下一条指令地址

call: 将当前cs:rip 的值压入栈顶， cs:rip 指向的是被调用函数的入口地址
ret: 从栈顶弹出原来保存在这里的cs:rip的值，放到cs:rip 

函数调用关系

//建立被调用者函数的堆栈框架
pushl %ebp   //我的理解，在这里，默认%esp就是比%ebp要加1的
movl %esp, %ebp

///被调用函数的函数体
///do sth
///

//拆除被调用者的堆栈框架
movl %ebp, %esp
popl %ebp
ret

分析case

...
pushl $8
movl  %esp, %ebp
subl  $4, %esp
movl  $8, (%esp)
...

#cat hello.c
#include <stdio.h>

int g(int x)
{
    return x + 3;
}

int f(int x)
{
    return g(x);
}

int main(void)
{
    return f(8) + 1;
}

#gcc -S -o hello.s hello.c

#cat  hello.s
g:
    pushq   %rbp
    movq    %rsp, %rbp
    movl    %edi, -4(%rbp)
    movl    -4(%rbp), %eax
    addl    $3, %eax
    popq    %rbp
    ret
f:
    pushq   %rbp
    movq    %rsp, %rbp
    subq    $8, %rsp
    movl    %edi, -4(%rbp)
    movl    -4(%rbp), %eax
    movl    %eax, %edi
    call    g
    leave
    ret
main:
    pushq   %rbp
    movq    %rsp, %rbp
    movl    $8, %edi
    call    f
    addl    $1, %eax
    popq    %rbp
    ret

Linux kernel-汇编基础

标签：include   存在   and   cat   寄存器   重要   register   $0   inux   

原文地址：https://www.cnblogs.com/muahao/p/9934675.html