![]() |
|
#10
|
|||
|
|||
|
theres a bug in the code above..
bASLR := Boolean(sii.ImageFlags); right there.. ImageFlags is a set of bitflags, to test for the aslr portion you need to and it and check the result, so you need to check bit 2, you're just blindly assuming that any non zero value for the whole thing means alsr is enabled.. this is wrong ----- UINT8 ImageFlags; // 0x0023 / 0x0033; 0x0001 / 0x0001 Bytes struct // 7 / 7 elements; 0x0001 / 0x0001 Bytes { UINT8 ComPlusNativeReady : 1; // 0x0023 / 0x0033; Bit: 0 UINT8 ComPlusILOnly : 1; // 0x0023 / 0x0033; Bit: 1 UINT8 ImageDynamicallyRelocated : 1; // 0x0023 / 0x0033; Bit: 2 UINT8 ImageMappedFlat : 1; // 0x0023 / 0x0033; Bit: 3 UINT8 BaseBelow4gb : 1; // 0x0023 / 0x0033; Bit: 4 UINT8 ComPlusPrefer32bit : 1; // 0x0023 / 0x0033; Bit: 5 UINT8 Reserved : 2; // 0x0023 / 0x0033; Bits: 6 - 7 }; |
|
|
Similar Threads
|
||||
| Thread | Thread Starter | Forum | Replies | Last Post |
| [Delphi] Loader shows how to patch PE protected with ASLR | Sn!per X | Source Code | 1 | 11-28-2015 00:33 |
| Help Me - CRC Check and FileSize Check | byvs | General Discussion | 11 | 07-31-2003 13:32 |