>> mec> How about: >> mec> mec> (1) before running the program, 'disassemble bowler' >> mec> (2) at the breakpoint, 'x/i $pc' >> mec> check that the output of (2) matches one of the lines in (1) > > > FYI, that's effectively what I did. It checks the $pc address against a table of valid instruction addresses. It doesn't match it fails, via gdb_test_multiple internals. All thats missing is a pattern to match any other pc address in bowler. I've added the attached. Andrew > Trying to single-step after corrupting the $pc would be meaningless. > > Andrew