|
Hmm, I suspect Bob's IsValidPtr loop would be way to slow for me. I should make some notes of the things V0ldemAr mentioned (two api's with the same address is a major one).
It seems one of the main differences between all these techniques is whether they depend on runtime API's. I was really only interested in static analysis.
|