Cannot print backtrace after syscall interception

[wujysh]

All backtrace functions are not working in the syscall overriden functions, e.g.

int backtrace(void **buffer, int size);

#include <boost/stacktrace.hpp>
std::cout << boost::stacktrace::stacktrace();

Looks like the interception assembly doesn't set the ss and sp back correctly. Not sure if this is the root cause. Is it possible to recover the full stack trace to ease trouble-shooting?

[wujysh]

@GBuella Can you help take a look? Thanks!