PDA

View Full Version : SEH in Vista with ASLR?


Dj_Oggy
03-12-2008, 08:48 AM
Hi,

i have question.I trying to implement low lvl seh routine in ASM for win vista with Vista ASLR feature enabled.With ASLR instruction push fs:[0] isnt working.

Know anyone,how install seh handler for ASLR compiled programs?

thx

evlncrn8
03-12-2008, 11:14 AM
think you need to use encodepointer as well as using seh entries in the pe file...

Dj_Oggy
03-12-2008, 11:42 AM
some encoding/decoding i saw there,but i never seen address of my handler.

I found place,where are saved addresses of handlers,but i cant find code,where are activated.

disavowed
03-14-2008, 03:05 PM
aslr shouldn't affect whether or not seh via fs:[0] works. just don't use hardcoded addresses and if you do be sure to include reloc fixups.

aionescu
03-16-2008, 05:07 PM
If the application is built with /SAFESEH you'll need to add RISC/x64-style SEH Table entries for each handler.

Dj_Oggy
03-17-2008, 02:28 AM
can be some example for better explain? thx