Live data from Hacker News

Bypassing Windows ASLR using "skype4COM" protocol handler

greyhathacker.net

11–12 of 12 posts

Re: Bypassing Windows ASLR using "skype4COM" protocol handler

#11
post #6
post #4

Earlier quoted context omitted.

Hardware breakpoints on memory accesses. This is a somewhat common technique for tracing the value of a variable backwards in time in native code, particularly in the presence of buffer overflows or other memory corruption. When debugging, you find out that a variable has a weird value, a value it could never have according to the code. So you put a hardware breakpoint on the variable's address and restart the progra…

On Linux you could try using the Fast Reversible Debugger ( https://github.com/fred-dbg/fred ) for its memory-accurate record/replay feature. Full disclosure: I was a contributor on that project at one point.

I've never heard of DMTCP or FReD. It sounds interesting. Have you thought of submitting it to HN?

Re: Bypassing Windows ASLR using "skype4COM" protocol handler

#12
post #6
post #4

Earlier quoted context omitted.

Hardware breakpoints on memory accesses. This is a somewhat common technique for tracing the value of a variable backwards in time in native code, particularly in the presence of buffer overflows or other memory corruption. When debugging, you find out that a variable has a weird value, a value it could never have according to the code. So you put a hardware breakpoint on the variable's address and restart the progra…

On Linux you could try using the Fast Reversible Debugger ( https://github.com/fred-dbg/fred ) for its memory-accurate record/replay feature. Full disclosure: I was a contributor on that project at one point.

I haven't tried it yet myself, but supposedly GDB has supported reversible debugging since 2009[0] — any experience with that? Limitations?

[0]: https://www.gnu.org/software/gdb/news/reversible.html

Post reply on HN