Ltrace Internals

ltrace is a program that permits you to track runtime library calls in dynamically linked programs without recompiling them, and is a really important tool in the debugging arsenal. This article will focus in how it has been implemented and how it works, trying to cover the actual lacks in academic and in-deep documentation of how this kind of tool works (setting the breakpoints, analysing the executable/library symbols, interpreting elf, others).

...

Download PDF.