C 言語関数:IsBadReadPtr サンプルコード

サンプルコードを検索した結果です。


TITLE : Microsoft Word Intruder RTF Sample Analysis | Check Point Blog
The ROP chain creates an executable heap with the size of 0x10000. It then copies the 1st stage shellcode to it and runs it. The 1st stage shellcode uses standard FLDZ/FSTENV to get the current instruction pointer, and uses a self XOR decoding loop with a 0x3B key. The purpose of this shellcode is to locate the 2nd stage shellcode. This technique is called egg hunting and uses the kernel32!isBadReadPtr() function........
http://blog.checkpoint.com/2015/06/26/microsoft-word-intruder-rtf-sample-analysis/


TITLE : Having a look at the Windows' User/Kernel exceptions dispatcher - Diary of a reverse-engineer
if(IsBadReadPtr((const void*)Context->Eip, SIZE_BIGGEST_X86_INSTR * MAX_INSTRUCTIONS) == 0).......
http://doar-e.github.io/blog/2013/10/12/having-a-look-at-the-windows-userkernel-exceptions-dispatcher
TITLE : Stack dump failure with some clang-compiled 32-bit binaries 揃 Issue #29 揃 jrfonseca/drmingw 揃 GitHub
if (!IsBadReadPtr(ptr+call.delta, sizeof(uint8_t)) &&.......
http://github.com/jrfonseca/drmingw/issues/29
TITLE : Stack dump failure with some clang-compiled 32-bit binaries 揃 Issue #29 揃 jrfonseca/drmingw 揃 GitHub
while (!IsBadReadPtr(sp, sizeof(uintptr_t))) {.......
http://github.com/jrfonseca/drmingw/issues/29
TITLE : Stack dump failure with some clang-compiled 32-bit binaries 揃 Issue #29 揃 jrfonseca/drmingw 揃 GitHub
if (!IsBadReadPtr(*sp, sizeof(uintptr_t))) {.......
http://github.com/jrfonseca/drmingw/issues/29
Googleで検索

https://www.google.co.jp/#q=IsBadReadPtr