Stack frame setup in ARM Architecture - Step-by-Step Execution

Concept Flow - Stack frame setup

Function call

↓

Push return address (LR) onto stack

↓

Push previous frame pointer (FP) onto stack

↓

Set new FP to current SP

↓

Allocate space for local variables by adjusting SP

↓

Function body executes

↓

Restore SP from FP

↓

Pop FP from stack

↓

Pop return address (LR) from stack

↓

Return to caller

This flow shows how a function sets up its stack frame on ARM: saving return address and frame pointer, allocating space, then restoring on return.

Execution Sample

ARM Architecture

push {lr}
push {fp}
add fp, sp, #0
sub sp, sp, #16
; function body
add sp, fp, #0
pop {fp}
pop {pc}

ARM assembly instructions to set up and tear down a stack frame during a function call.

Analysis Table

Step	Action	SP (Stack Pointer)	FP (Frame Pointer)	Stack Content (Top to Bottom)
1	Function call starts	0x1000	0x0000	Empty
2	Push LR (return address)	0x0FFC	0x0000	LR
3	Push FP (previous frame pointer)	0x0FF8	0x0000	FP, LR
4	Set FP = SP	0x0FF8	0x0FF8	FP, LR
5	Allocate locals (sub SP by 16)	0x0FE8	0x0FF8	Local vars space, FP, LR
6	Function body executes	0x0FE8	0x0FF8	Local vars space, FP, LR
7	Restore SP from FP	0x0FF8	0x0FF8	FP, LR
8	Pop FP	0x0FFC	0x0000	LR
9	Pop LR (return address)	0x1000	0x0000	Empty
10	Return to caller	0x1000	0x0000	Empty

💡 Function returns; SP and FP restored to original values; stack cleaned.

State Tracker

Variable	Start	After Step 2	After Step 3	After Step 4	After Step 5	After Step 7	After Step 8	Final
SP	0x1000	0x0FFC	0x0FF8	0x0FF8	0x0FE8	0x0FF8	0x0FFC	0x1000
FP	0x0000	0x0000	0x0000	0x0FF8	0x0FF8	0x0FF8	0x0000	0x0000
Stack Content	Empty	LR	FP, LR	FP, LR	Local vars, FP, LR	FP, LR	LR	Empty

Key Insights - 3 Insights

Why do we push the LR (return address) onto the stack at the start?

Because the function may call other functions and overwrite LR, saving it on the stack preserves the return address (see Step 2 in execution_table).

What is the purpose of setting FP = SP after pushing FP?

Setting FP to SP marks the base of the current stack frame, so local variables and parameters can be accessed relative to FP (see Step 4).

Why do we restore SP from FP before popping FP and LR?

Restoring SP from FP deallocates local variables, returning SP to the frame base before popping saved registers (see Step 7).

Visual Quiz - 3 Questions

Look at the execution_table at Step 5, what is the SP value after allocating space for local variables?

A 0x0FF8

B 0x0FFC

C 0x0FE8

D 0x1000

💡 Hint

Check the SP column at Step 5 in the execution_table.

At which step is the FP set to the current SP?

A Step 3

B Step 4

C Step 2

D Step 5

💡 Hint

Look for the action 'Set FP = SP' in the execution_table.

If the function did not push FP onto the stack, what would be missing after Step 8?

A Previous frame pointer (FP)

B Local variables space

C Return address (LR)

D Stack pointer (SP)

💡 Hint

See what is popped at Step 8 in the execution_table.

Concept Snapshot

Stack frame setup in ARM:
- Push LR (return address) to stack
- Push FP (previous frame pointer)
- Set FP = SP (new frame base)
- Allocate locals by subtracting from SP
- On return, restore SP from FP
- Pop FP and LR
- Return to caller

Full Transcript

When a function is called in ARM architecture, it sets up a stack frame to manage local variables and return information. First, it pushes the return address (LR) onto the stack to save where to return after finishing. Then it pushes the previous frame pointer (FP) to keep track of the caller's frame. The FP is updated to the current SP to mark the new frame base. The stack pointer (SP) is then moved down to allocate space for local variables. After the function body runs, SP is restored from FP to deallocate locals. Finally, FP and LR are popped off the stack to restore the caller's context, and the function returns. This process ensures each function call has its own safe workspace on the stack.