View Full Version : SEH in Vista with ASLR?
Dj_Oggy
03-12-2008, 08:48 AM
Hi,
i have question.I trying to implement low lvl seh routine in ASM for win vista with Vista ASLR feature enabled.With ASLR instruction push fs:[0] isnt working.
Know anyone,how install seh handler for ASLR compiled programs?
thx
evlncrn8
03-12-2008, 11:14 AM
think you need to use encodepointer as well as using seh entries in the pe file...
Dj_Oggy
03-12-2008, 11:42 AM
some encoding/decoding i saw there,but i never seen address of my handler.
I found place,where are saved addresses of handlers,but i cant find code,where are activated.
disavowed
03-14-2008, 03:05 PM
aslr shouldn't affect whether or not seh via fs:[0] works. just don't use hardcoded addresses and if you do be sure to include reloc fixups.
aionescu
03-16-2008, 05:07 PM
If the application is built with /SAFESEH you'll need to add RISC/x64-style SEH Table entries for each handler.
Dj_Oggy
03-17-2008, 02:28 AM
can be some example for better explain? thx
vBulletin® v3.7.2, Copyright ©2000-2008, Jelsoft Enterprises Ltd.