O'Reilly logo

Memory Dump Analysis Anthology, Volume 7 by Dmitry Vostokov

Stay ahead with the world's most comprehensive technology and business learning platform.

With Safari, you learn the way you learn best. Get unlimited access to videos, live online training, learning paths, books, tutorials, and more.

Start Free Trial

No credit card required

Translated Exception

Runtime software exceptions (such as C++ exceptions, Volume 3, page 84) can be translated by custom exception handlers (Volume 1, page 471) into other exceptions by changing exception data. This is different from nested exceptions (Volume 2, page 305) where another exception is thrown. One example of such possible translation we recently encountered when looked at raw stack data (!teb -> dps) having signs of hidden exceptions (multiple RaiseException calls, Volume 1, page 271) and also CLR execution residue (valid return addresses of clr module). In addition to final invalid handle exception (Volume 2, page 269) and one hidden access violation there were many exception codes c0000027. Google search pointed to the article ...

With Safari, you learn the way you learn best. Get unlimited access to videos, live online training, learning paths, books, interactive tutorials, and more.

Start Free Trial

No credit card required