Questions about windbg
Read more about windbg
python (65.2k questions)
javascript (44.3k questions)
reactjs (22.7k questions)
java (20.8k questions)
c# (17.4k questions)
html (16.3k questions)
r (13.7k questions)
android (13k questions)
How to detect which variable/code is creating a stack-based buffer overrun
I have an application that has started failing with 0xc0000409 - The system detected an overrun of a stack-based buffer in this application. This overrun could potentially allow a malicious user to ga...
DLT
Votes: 0
Answers: 1
How to calculate the address of a function using the base address of ntoskrnl.exe
This is what I have determined thus far on a test machine:
base address of ntoskrnl.exe is 0xFFFFF802C8803000
using IDA the address of the imagebase is 0x0000000140000000
using IDA the address of the...
JbG
Votes: 0
Answers: 1
windbg kernel debugging - How to get the physical address
I have a module loaded at fffff801`16e00000 and want to get its physical address via !pte but windbg is saying "Levels not implemented for this platform", what gives?
I know how to do i man...
user16469617
Votes: 0
Answers: 2
Find base address for a module using WinDbg
How can I determine the base address of a particular module (say, for instance, ntoskrnl.exe) in WinDbg? Is that possible?
JoeT
Votes: 0
Answers: 1