Jump to content
Tuts 4 You
Sign in to follow this  
fetch

x64dbg crashes with memory access violation

Recommended Posts

fetch

Dump window -> Format Unsigned long long (64 bit) -> scroll little bit -> x64dbg crashes with memory access violation. Known?


Share this post


Link to post
Share on other sites
fetch

Another critical issue:


 


post-78167-0-66051400-1401701968_thumb.j


 


1. Double click on mov r8, API_addr


2. Don't change anything, click OK.


3. Code became corrupted:


 


post-78167-0-43889700-1401701965_thumb.j


Edited by fetch (see edit history)

Share this post


Link to post
Share on other sites
Loki

Just playing with x32 a little.


 


Is there a known bug where it just ends the disassembly? Not sure if its crashing the disassembler as it stops during some data bytes which I guess it might have issues with if it is trying to disassemble to code?


 


f94e20330529659.jpg

Share this post


Link to post
Share on other sites
mrexodia

@fetch: I cannot reproduce the crash on my system (the unsigned long long one), the other problem you are reporting is an assembler problem, the assembler is not part of x64_dbg, it's a standalone project that I currently do not support. Sorry about that. The actual issue is that rip-relative addressing is not supported so it will try to create a direct reference.

@Loki: this is not actually a problem, the end of the memory page is just reached. For example you have

.text, addr 401000, size 3000, protection ReadWriteExecute
now you do:
VirtualProtect(402000, 2000, ReadExecute)
it will become:
.text addr 401000, size 1000, protection ReadWriteExecute.text addr 402000, size 2000, protection ReadExecute
x64_dbg will see this as two different pages (currently) so the disassembly ends.

Greetings,

Mr. eXoDia

PS I go to Paris now (yay), so I might not respond to anyone for some time.

Share this post


Link to post
Share on other sites
Loki

I should have noticed it was the end of the page :)


 


No plans to either add next page or give a 'show more' type view? Just helps when doing a little static analysis


 


Have fun in Paris!


Share this post


Link to post
Share on other sites
GIV

 

PS I go to Paris now (yay), so I might not respond to anyone for some time.

 

 

So Armadillo developers and others can stay cool now knowing that you are away...

:)

Share this post


Link to post
Share on other sites
Artic

PS I go to Paris now (yay), so I might not respond to anyone for some time.

have a good time, for the moment everything works here with x64dbg!

Share this post


Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
Sign in to follow this  

×
×
  • Create New...