LLDB(Low Lever Debug)

断点

• 设置断点(C语言)
  $breakpoint set -n XXX
  set 是子命令
  -n 是选项 是--name 的缩写!

*设置断点(OC)
$breakpoint set -n "[ViewController pauseGame:]"
设置多个
$breakpoint set -n "[ViewController pauseGame:]" -n "[ViewController pauseGame1:]"
在某个文件里面设置
$breakpoint set --file ViewController.m --selector touchesBegan:withEvent:
遍历整个项目的方法
$breakpoint set -r Game:

• 查看断点列表
  $breakpoint list

• 删除
  $breakpoint delete 组号

• 禁用/启用
  $breakpoint disable 禁用
  $breakpoint enable 启用

• 遍历整个项目中满足Game:这个字符的所有方法
  $breakpoint set -r Game:

• 查看更多断点
  $breakpoint help 或者 help

流程控制

• 继续执行
  $continue c
• 单步运行,将子函数当做整体一步执行
  $n next
• 单步运行,遇到子函数会进去
  $s

查看堆栈信息

$bt

* thread #1, queue = 'com.apple.main-thread', stop reason = breakpoint 1.1
    frame #0: 0x000000010003a3a8 LLDB`-[ViewController pengTest4:](self=0x0000000100205180, _cmd="pengTest4:", str=@"peng") at ViewController.m:105
    frame #1: 0x000000010003a35c LLDB`-[ViewController pengTest3:](self=0x0000000100205180, _cmd="pengTest3:", str=@"peng") at ViewController.m:101
  * frame #2: 0x000000010003a2d8 LLDB`-[ViewController pengTest2:](self=0x0000000100205180, _cmd="pengTest2:", str=@"peng") at ViewController.m:96
    frame #3: 0x000000010003a254 LLDB`-[ViewController pengTest1:](self=0x0000000100205180, _cmd="pengTest1:", str=@"peng") at ViewController.m:91
    frame #4: 0x000000010003a0bc LLDB`-[ViewController touchesBegan:withEvent:](self=0x0000000100205180, _cmd="touchesBegan:withEvent:", touches=1 element, event=0x00000001700f0f80) at ViewController.m:51
    frame #5: 0x000000019643401c UIKit`forwardTouchMethod + 336
    frame #6: 0x0000000196433eb8 UIKit`-[UIResponder touchesBegan:withEvent:] + 60
    frame #7: 0x00000001962d817c UIKit`-[UIWindow _sendTouchesForEvent:] + 1948
    frame #8: 0x00000001962d3728 UIKit`-[UIWindow sendEvent:] + 3192
    frame #9: 0x00000001962a433c UIKit`-[UIApplication sendEvent:] + 340
    frame #10: 0x0000000196a9e014 UIKit`__dispatchPreprocessedEventFromEventQueue + 2400
    frame #11: 0x0000000196a98770 UIKit`__handleEventQueue + 4268
    frame #12: 0x0000000196a98b9c UIKit`__handleHIDEventFetcherDrain + 148
    frame #13: 0x000000019012142c CoreFoundation`__CFRUNLOOP_IS_CALLING_OUT_TO_A_SOURCE0_PERFORM_FUNCTION__ + 24
    frame #14: 0x0000000190120d9c CoreFoundation`__CFRunLoopDoSources0 + 540
    frame #15: 0x000000019011e9a8 CoreFoundation`__CFRunLoopRun + 744
    frame #16: 0x000000019004eda4 CoreFoundation`CFRunLoopRunSpecific + 424
    frame #17: 0x0000000191ab8074 GraphicsServices`GSEventRunModal + 100
    frame #18: 0x0000000196309058 UIKit`UIApplicationMain + 208
    frame #19: 0x000000010003a4f0 LLDB`main(argc=1, argv=0x000000016fdcbae0) at main.m:14
    frame #20: 0x000000018f05d59c libdyld.dylib`start + 4

• 跳入堆栈对应函数
  $frame select 3

frame #3: 0x000000010003a254 LLDB`-[ViewController pengTest1:](self=0x0000000100205180, _cmd="pengTest1:", str=@"peng") at ViewController.m:91
   88   
   89   - (void)pengTest1:(NSString *)str{
   90       NSLog(@"%s",__func__);
-> 91       �[4m[�[0mself pengTest2:str];
   92   }
   93   
   94   - (void)pengTest2:(NSString *)str{

• 进入堆栈的上一个函数
  $ up

• 进入堆栈的下一个函数
  $ down

• 返回堆栈调试
  $ thread return

LLDB动态调试

• 添加数据（下面伪代码）

$p [self.models addObject:[[Person alloc] init]];

• 添加多行代码 （换行时：同事按住control + command键）

$p Person *p5 = [[Person alloc] init];p5.name = "nextstep";p5.age = 13;[self.models addObject:p5];

内存断点

• 设置内存断点
  $watchpoint set expression 0x000000010030ac98

$frame variable
     
     (ViewController *) self = 0x0000000100509a20
     (SEL) _cmd = "viewDidLoad"
     (Person *) p1 = 0x000000010030aaf0
     (Person *) p2 = 0x0000000000000010
     (Person *) p3 = 0x000000016fd060f8
     //查看需要设置内存地址
     $p &p1->_name
     (NSString **) $0 = 0x000000010030ac98
     
     //设置
     $watchpoint set expression 0x000000010030ac98

• 删除内存断点
  $watchpoint delete

• 查看内存断点
  $watchpoint list

• 查看内存断点帮助
  $watchpoint help
  $watchpoint set help

cmmand指令(被动触发)

有时候当我们断点的时候，想让系统帮忙打印下对应信息

#设置断点
(lldb) b -[ViewController pengTest3:]

#输出
     Breakpoint 1: where = LLDB`-[ViewController pengTest3:] + 44 at ViewController.m:135, address = 0x0000000100012314

#查看断点清单
     (lldb) breakpoint list
     Current breakpoints:
     1: name = '-[ViewController pengTest3:]', locations = 1, resolved = 1, hit count = 1
     1.1: where = LLDB`-[ViewController pengTest3:] + 44 at ViewController.m:135, address = 0x0000000100012314, resolved, hit count = 1

     #设置断点指令（后续每次进入该断点 会运行对应指令）
     (lldb) breakpoint command add 1
     Enter your debugger command(s).  Type 'DONE' to end.
     > po self
     > p self.view
     > DONE

    #运行结果
 po self
<ViewController: 0x100405920>


 p self.view
(UIView *) $3 = 0x000000010020e7e0
    
  

*查看断点的指令
$breakpoint command list 1
*删除断点指令
$breakpoint command delete 1

p & po 区别

• po - :
  Displays any returned value with formatting controlled by the type's author.
  类似 NSlog 格式化打印，自定义的打印方式
• p - :
  Displays any returned value with LLDB's default formatting.
  expression 的缩写， 会输出对应的内存地址值

stop-hook(被动触发)

让你在每次stop的时候去执行一些命令,只对breadpoint,watchpoint
$target stop-hook add -o "frame variable"
断点一触发就会打印对应信息

Process 821 resuming
(ViewController *) self = 0x0000000100405920
(SEL) _cmd = "touchesBegan:withEvent:"
(__NSSetM *) touches = 0x0000000170246510 1 element
(UITouchesEvent *) event = 0x00000001740ef780
(UIView *) p1 = 0x000000010020e7e0

查看

$target stop-hook list

删除

$target stop-hook delete

直接取消 对应编号hook

$undisplay 2

常用命令

• 查看使用的动态库 (列出当前可执行的和依赖的共享库
  图像)
  $ image list
• 查看使用的动态库(在可执行的和依赖的范围内查找信息
  共享库映像)
  $image lookup -a "0x00123"
• 查看类的详细信息
  $image lookup -t "Person"

Best match found in /Users/pengxicheng/Library/Developer/Xcode/DerivedData/TestLLDB-ducscbzedftwabgaptewzlmqgexq/Build/Products/Debug-iphoneos/TestLLDB.app/TestLLDB:
id = {0x30000002b}, name = "Person", byte-size = 24, decl = Person.h:11, compiler_type = "@interface Person : NSObject{
    int _age;
    NSString * _name;
}
@property ( getter = name,setter = setName:,readwrite,copy,nonatomic ) NSString * name;
@property ( getter = age,setter = setAge:,assign,readwrite,nonatomic ) int age;

• p
• b -[xxx xxx] //下断点
• x 同 memory read 0x0000000104c0c3e0 //内存地址读写
• register read //寄存器内容读取
• po

参考1：
http://lldb.llvm.org/index.html
参考2：
http://www.dreamingwish.com/article/lldb-usage-a.html
参考3：
https://developer.apple.com/library/content/documentation/IDEs/Conceptual/gdb_to_lldb_transition_guide/document/lldb-basics.html#//apple_ref/doc/uid/TP40012917-CH2-SW1