Take a look at Apple's technical notes on CrashReporter here: https://developer.apple.com/library/mac/#technotes/tn2004/tn2123.html
Thread 0 crashed with X86 Thread State (32-bit): eax: 0x00000000 ebx: 0x942cea07 ecx: 0xbfffed1c edx: 0x94b3a8e6 edi: 0x00000000 esi: 0x00000000 ebp: 0xbfffed58 esp: 0xbfffed1c ss: 0x0000001f efl: 0x00010206 eip: 0x00000000 cs: 0x00000017 ds: 0x0000001f es: 0x0000001f fs: 0x00000000 gs: 0x00000037 cr2: 0x00000000
For Intel-based computers with 32-bit code, you should consider the following points:
Focus on two values: eip and exception address (described earlier).
eip is the program counter at the time the exception occurs. That is, this is the address of the instruction that caused the exception. For most memoryless access exceptions (e.g. EXC_ARITHMETIC / EXC_I386_DIV caused by integer division by zero), this is the key value.
For memory access exceptions:
If eip is equal to the exception address, the exception was caused by dialing instructions. This usually means:
you called a pointer to a fake function (or, equivalently, you called a method on a dummy object)
you returned to the wrong address, which in turn means that you damaged the stack
If the eip does not match the exception address, the exception was thrown by a memory access instruction (from the point of view of C, this means that you are dereferencing an invalid pointer).
source share