News for hackers. Stuff that matters.

A comment on Bypassing Windows ASLR using "skype4COM" protocol handler. Parent comment

Re:Bypassing Windows ASLR using "skype4COM" protocol handler by revelation on Sunday February 24, 2013 @09:01PM (#5276888)
Some tools (e.g. IDA) will just completely corrupt their database trying to relocate to a base different from the one in the image. It also makes for random looking crash reports.

Not as much of a problem if you have debug data.

[ Parent | on HN ]
Re:Bypassing Windows ASLR using "skype4COM" protocol handler by homedog on Sunday February 24, 2013 @10:42PM (#5277201)
I've rebased addresses in IDA tons of times, and I've never run into any corruption.
[ Parent | on HN ]
Re:Bypassing Windows ASLR using "skype4COM" protocol handler by daeken on Monday February 25, 2013 @01:20AM (#5277594)
I've never run into corruption directly, but IDA has tanked for me upon exiting debugging where it attempts to re-relocate. Haven't seen that in a number of years, though.
[ Parent | on HN ]