Detecting the Debugger

creantan

Q:  How do I determine if I'm being run under the debugger?

A: How do I determine if I'm being run under the debugger?

The code in Listing 1 shows the best way to do this.

1. #include <assert.h>
   
2. #include <stdbool.h>
   
3. #include <sys/types.h>
   
4. #include <unistd.h>
   
5. #include <sys/sysctl.h>
   
6. 
   
7. static bool AmIBeingDebugged(void)
   
8.     // Returns true if the current process is being debugged (either
   
9.     // running under the debugger or has a debugger attached post facto).
   
10. {
    
11.     int                 junk;
    
12.     int                 mib[4];
    
13.     struct kinfo_proc   info;
    
14.     size_t              size;
    
15. 
    
16.     // Initialize the flags so that, if sysctl fails for some bizarre
    
17.     // reason, we get a predictable result.
    
18. 
    
19.     info.kp_proc.p_flag = 0;
    
20. 
    
21.     // Initialize mib, which tells sysctl the info we want, in this case
    
22.     // we're looking for information about a specific process ID.
    
23. 
    
24.     mib[0] = CTL_KERN;
    
25.     mib[1] = KERN_PROC;
    
26.     mib[2] = KERN_PROC_PID;
    
27.     mib[3] = getpid();
    
28. 
    
29.     // Call sysctl.
    
30. 
    
31.     size = sizeof(info);
    
32.     junk = sysctl(mib, sizeof(mib) / sizeof(*mib), &info, &size, NULL, 0);
    
33.     assert(junk == 0);
    
34. 
    
35.     // We're being debugged if the P_TRACED flag is set.
    
36. 
    
37.     return ( (info.kp_proc.p_flag & P_TRACED) != 0 );
    
38. }

复制代码

1. Important: Because the definition of the kinfo_proc structure (in <sys/sysctl.h>) is conditionalized by __APPLE_API_UNSTABLE, you should restrict use of the above code to the debug build of your program.

复制代码

https://developer.apple.com/library/mac/qa/qa1361/_index.html

开心啦

沙发，不懂，只有支持