ollydbg - Code\Data segment overlaping -
when @ registers window in olly see both code segment , data segment registers span the whole memory space. mean overlap each other ?
when @ memory map seems populated both code areas , data areas.
thank you
on win32 segment registers go 0 0xffffffff. so, yes, overlap. example freely exchange segment registers in code (but opcode instruction gets bigger because of prefix).
one exception fs register. set differently each thread in process , can used locate thread information block.
windows uses memory protection try keep data , code savely apart. if @ memory map, see memory blocks have "e" (execute protection) in "access" column. code , has no "w" (write protection).
Comments
Post a Comment