[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: API used to access process heap structure

Subject: Re: API used to access process heap structure
From: Pelle Johansson <email@hidden>
Date: Fri, 8 Sep 2006 08:50:48 +0200
Delivered-to: email@hidden
Delivered-to: email@hidden


8 sep 2006 kl. 01.35 skrev email@hidden:

walking another process's memory heap smacks of
1. reverse engineering

Much easier done in a normal debugger, or by simply disassembling. It's a perfectly legal reason, btw.

2. developing a buffer-overflow attack


Can't really argue here, it could be used for this.

or
3. trying to patch a memory-leak which is better done using a debugger
like Purify http://en.wikipedia.org/wiki/Purify

or 4. Cheating in games: http://www.brokenzipper.com/. Source code is available, which should help the OP (see especially VMRegion.m). It uses task_for_pid() though, so something has to be done to get around that on Intel. -- Pelle Johansson _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-dev mailing list (email@hidden) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-dev/email@hidden

This email sent to email@hidden

References:
	>Re: API used to access process heap structure (From: email@hidden)

Prev by Date: Re: Disabling IPv4?
Next by Date: Re: API used to access process heap structure
Previous by thread: Re: API used to access process heap structure
Next by thread: Re: API used to access process heap structure
Index(es):
- Date
- Thread

Home