Research
Security News
Malicious npm Package Targets Solana Developers and Hijacks Funds
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
cdt-gdb-adapter
Advanced tools
This is an implementation of the Debug Adapter Protocol for gdb. It is loosely based on the Eclipse CDT MI layer. We are at least learning from it.
The source code can be found in the following repository: https://github.com/eclipse-cdt-cloud/cdt-gdb-adapter
Build is pretty simple.
yarn
The entry point for the adapter is cdtDebugAdapter
for local debugging
and cdtDebugTargetAdapter
for target (remote) debugging.
--server=PORT
Start the adapter listening on the given port instead of on stdin/stdout.
--config=INITIALCONFIG
Start the adapter using the given configuration as a starting point for the args in launch
or attach
request.
For example, the default GDB can be set like this:
node debugTargetAdapter.js --config='{"gdb":"arm-none-eabi-gdb"}'
The config can be passed on the command line as JSON, or a response file can be used by starting the argument with @
.
The rest of the argument will be interpreted as a file name to read.
For example, to start the adapter defaulting to a process ID to attach to, create a file containing the JSON and reference it like this:
cat >config.json <<END
{
"processId": 1234
}
END
node debugAdapter.js --config=@config.json
--config-frozen=FROZENCONFIG
Similar to --config
, the --config-frozen
sets the provided configuration fields in the args to the launch
or attach
request to the given values, not allowing the user to override them.
Specifying which type of request is allowed (launch
or attach
) can be specified with the request
field.
When freezing the type of request, regardless of which type of request the user requested, the frozen request type will be used.
For example, the adapter can be configured for program to be frozen to a specific value. This may be useful for starting adapters in a container and exposing the server port.
node debugAdapter.js --server=23221 --config-frozen='{"program":"/path/to/my.elf"}'
Testing of the adapter can be run with yarn test
. See Integration Tests readme
for more details, including how to setup a Windows machine with msys2 to run the tests.
Pull Requests built using GitHub actions.
In the GitHub actions result you can examine test report and download the test-logs
artifacts which are the verbose logs of each test that was run.
To debug the adapter there are multiple options depending on how this module is integrated. For example, if being used as a VS Code extension, see https://github.com/eclipse-cdt-cloud/cdt-gdb-vscode#building.
However, if you are writing tests and developing this module independently you can use the launch configurations in the launch.json with VS Code. For example, if you open a *.spec.ts file in VS Code you can use the "Mocha Current File & launch Server" configuration to automatically launch the debug server in one debugged process and the test in another.
FAQs
gdb adapter implementing the debug adapter protocol
The npm package cdt-gdb-adapter receives a total of 254 weekly downloads. As such, cdt-gdb-adapter popularity was classified as not popular.
We found that cdt-gdb-adapter demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
Security News
Research
Socket researchers have discovered malicious npm packages targeting crypto developers, stealing credentials and wallet data using spyware delivered through typosquats of popular cryptographic libraries.
Security News
Socket's package search now displays weekly downloads for npm packages, helping developers quickly assess popularity and make more informed decisions.