История изменений

Можно использовать hardware watchpoint. Через ptrace это можно сделать

http://www.secretmango.com/jimb/Whitepapers/ptrace/ptrace.html там пример есть

The following example is a program that implements a watchpoint on a memory location using ptrace(2) (assuming that the target system does not have an intrinsic watchpoint functionality... more on this further down). It will tell you the exact address of the instruction that changed the memory location supplied.

Но это те еще костыли

Можно использовать hardware watchpoint. Через ptrace это можно сделать

http://www.secretmango.com/jimb/Whitepapers/ptrace/ptrace.html там пример есть

The following example is a program that implements a watchpoint on a memory location using ptrace(2) (assuming that the target system does not have an intrinsic watchpoint functionality... more on this further down). It will tell you the exact address of the instruction that changed the memory location supplied.