Oh that'd be silly - to just substr the process memory and just look for strings that were identical to the packed pointer. Here's I've half-copied, half-sketched the code that I'm running in http://lik.grenekatz.org/downloads/perl/Devel/UncheckedOps.pm.

use vars qw( %ALLOPS %OPMAP @QUEUE_OPCODES_TO_FIX );
CHECK
{
    walkallops_filtered( sub { foo( $op ) ... }, \ &queue_opcode );
    fix_opcode( $_ ) for @QUEUE_OPCODES_TO_FIX;
}

sub queue_opcode
{
    my $op = shift;
    push @QUEUE_OPCODES_TO_FIX, $op;
}

sub foo
{
    my $op = shift;
    my $addr = $$op;
    $ALLOPS{ $addr } = $op;
    for my $m ( qw( next sibling ppaddr first last other pmreplroot pm
+replstart pmnext ) )
    {
        my $to = eval { ${ $op->$m } };
        next unless $to;

        push @{$OPMAP{ $addr }}, "$to $m";
    }
}

x_opcode
{
    my $op = shift;
    my $addr = $$op;

    # Construct the new program fragment in reverse order so parent no
+des
    # can point to child nodes. See the tree immedia

    # null
    #    or
    #       $OP
    #       die
    #          pushmark
    #          null2
    #             gvsv
    
    my $gvsv = B::SVOP->new( gvsv => 2, '$!' );
    my $null2 = B::OP->new( null => 6 );
    $null2->private( 1 );
    my $pushmark = B::OP->new( pushmark => 2 );
    my $die = B::LISTOP->new( die => 5, $pushmark, $null2 );
    $die->targ( 1 );
    $die->private( 1 );
    $pushmark->sibling( $null2 );
    my $or = B::LOGOP->new( or => 2, $op, $die );
    $or->private( 1 );
    my $null = B::OP->new( null => 5 );
    $null->private( 1 );

    # Tree order
    my $orig_sibling = $op->sibling;
    $op->sibling( $die );
    
    # Now thread the execution order.
    my $orig_next = $op->next;
    # EXT -> $op
    #     -> OR
    #     -> $orig_next || $pushmark
    #        ( null2 -> gvsv )
    #     -> gvsv
    #     -> die
    $op->next( $or );

    $or->next( $orig_next );
    $or->other( $pushmark );
    $null->next( $orig_next );

    $pushmark->next( $gvsv );
    $null2->next( $gvsv ); # Also but this is skipped anyway.

    $gvsv->next( $die );
    
    $die->next( $orig_next );
    
    # Now change everything that currently points to $op so that it po
+ints to
    my @referrents = @{ $OPMAP{ $addr } };
#    use YAML 'Dump';
#    print Dump( $addr, \%OPMAP ) or die $!;exit;
    foreach my $referrent ( @referrents )
    {
    my ( $referrent_addr,
         $referrent_attr ) = split ' ', $referrent;
    print "$$op $referrent_addr $referrent_attr\n" or die $!;
    
#    my $co = B::class( $op );
#    my $cn = $op->oldname;
#    my $c = B::class( $referrent_obj );
#    my $n = $referrent_obj->oldname;
    
#    $referrent_obj->$referrent_attr( $op );
#    print STDERR "$referrent_obj->$referrent_attr( $op )\n" or die $!
+;
    }
}
[download]

---

---

Posts are HTML formatted. Put <p> </p> tags around your paragraphs. Put <code> </code> tags around your code and data!

Titles consisting of a single word are discouraged, and in most cases are disallowed outright.

Read Where should I post X? if you're not absolutely sure you're posting in the right place.

Please read these before you post! —

• How do I compose an effective node title?
• How do I post a question effectively?
• Markup in the Monastery

Posts may use any of the Perl Monks Approved HTML tags:

a, abbr, b, big, blockquote, br, caption, center, col, colgroup, dd, del, details, div, dl, dt, em, font, h1, h2, h3, h4, h5, h6, hr, i, ins, li, ol, p, pre, readmore, small, span, spoiler, strike, strong, sub, summary, sup, table, tbody, td, tfoot, th, thead, tr, tt, u, ul, wbr

You may need to use entities for some characters, as follows. (Exception: Within code tags, you can put the characters literally.)

	For:		Use:
	&		&
	<		&lt;
	>		&gt;
	[		&#91;
	]		&#93;

Link using PerlMonks shortcuts! What shortcuts can I use for linking?

See Writeup Formatting Tips and other pages linked from there for more info.