Problem with Return Address

		Exetools > General > General Discussion
Problem with Return Address

08-02-2003, 18:39

Squidge

Drunken Squirrel

Join Date: Oct 2002

Posts: 412

Rept. Given: 4

Rept. Rcvd 9 Times in 4 Posts

Thanks Given: 0

Thanks Rcvd at 6 Times in 6 Posts

Which protection was it? As any app that uses CALL to jump into MFC is guaranteed to have a valid return address as it's pushed onto the stack by the hardware. What you are most likely seeing is that the app itself is doing the PUSH and then JMPing into MFC. Maybe it pushes the address of some protection function onto the stack, and once the protection is removed, the result is zero, hence the crash?

« Previous Thread | Next Thread »

Thread Tools
Show Printable Version Email this Page
Display Modes
Switch to Linear Mode Switch to Hybrid Mode Threaded Mode

Posting Rules
You may not post new threads You may not post replies You may not post attachments You may not edit your posts BB code is On Smilies are On [IMG] code is Off HTML code is Off Forum Rules

Similar Threads
Thread	Thread Starter	Forum	Replies	Last Post
How do I know what information return this address?	byvs	General Discussion	5	11-20-2015 20:57
Can we hook some func in another process then change return address?	Teerayoot	General Discussion	5	09-21-2004 11:12
Softice - how do I return to calling code?	sync	General Discussion	16	08-22-2002 20:02

All times are GMT +8. The time now is 16:53.