Results 1 to 6 of 6

Thread: SEH in Vista with ASLR?

  1. #1
    Dj_Oggy
    Guest

    SEH in Vista with ASLR?

    Hi,

    i have question.I trying to implement low lvl seh routine in ASM for win vista with Vista ASLR feature enabled.With ASLR instruction push fs:[0] isnt working.

    Know anyone,how install seh handler for ASLR compiled programs?

    thx
    I promise that I have read the FAQ and tried to use the Search to answer my question.

  2. #2
    think you need to use encodepointer as well as using seh entries in the pe file...

  3. #3
    Dj_Oggy
    Guest
    some encoding/decoding i saw there,but i never seen address of my handler.

    I found place,where are saved addresses of handlers,but i cant find code,where are activated.
    I promise that I have read the FAQ and tried to use the Search to answer my question.

  4. #4
    <script>alert(0)</script> disavowed's Avatar
    Join Date
    Apr 2002
    Posts
    1,281
    aslr shouldn't affect whether or not seh via fs:[0] works. just don't use hardcoded addresses and if you do be sure to include reloc fixups.

  5. #5
    If the application is built with /SAFESEH you'll need to add RISC/x64-style SEH Table entries for each handler.
    --
    Best regards,
    Alex Ionescu

  6. #6
    Dj_Oggy
    Guest
    can be some example for better explain? thx
    I promise that I have read the FAQ and tried to use the Search to answer my question.

Similar Threads

  1. ASLR and patching
    By pHi1t3r in forum Advanced Reversing and Programming
    Replies: 5
    Last Post: January 21st, 2011, 15:45
  2. Ollydbg / Vista x64 Issues
    By uber.core in forum OllyDbg Support Forums
    Replies: 6
    Last Post: October 15th, 2008, 15:45
  3. 32-bit window(Vista) problems with 4GB RAM
    By Hero in forum Off Topic
    Replies: 3
    Last Post: June 29th, 2008, 10:35
  4. Weird dll hook thanks to Vista SP1
    By TiGa in forum Advanced Reversing and Programming
    Replies: 2
    Last Post: March 28th, 2008, 15:23
  5. Vista Problem
    By rendari in forum Advanced Reversing and Programming
    Replies: 3
    Last Post: March 4th, 2008, 21:29

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •