A forum for reverse engineering, OS internals and malware analysis 

Ask your beginner questions here.
 #12082  by _Lynn
 Tue Mar 13, 2012 4:34 am
can anyone explain how debugger manages a single instruction fetch hardware breakpoint across all processors? inspect of ktrap_frame show 0 for all threads. I interest in redirecting int 1 but what is best method to set these?

edit.

basically i ask - we know that context retrieved from trap_frame obviously isn't going to be that an exact copy, and does not reflect actual dr registers. but this must mean that thread is sent through a procedure to set these.

sorry for english.
 #12166  by EP_X0FF
 Fri Mar 16, 2012 11:59 am
_Lynn wrote:basically i ask - we know that context retrieved from trap_frame obviously isn't going to be that an exact copy, and does not reflect actual dr registers. but this must mean that thread is sent through a procedure to set these.
IIUC your question, then answer is interrupt handler.