Skip to content
This repository has been archived by the owner on Dec 27, 2023. It is now read-only.

Latest commit

 

History

History

pdb64-oob

Folders and files

NameName
Last commit message
Last commit date

parent directory

..
 
 
 
 
 
 

Out-of-bounds in pdb64

Reproduction steps:

mklink /H pdb-test.pdb crash-EXCEPTION_ACCESS_VIOLATION_READ-5dbea944
windbgx -g "c:\Program Files\IDA Pro 7.5\ida64.exe" -B pdb-test.exe

Output from windbg:

pdb64+0x3a944:
00000000`60efa944 488b0cc8        mov     rcx,qword ptr [rax+rcx*8] ds:00000253`f6609318=????????????????
0:000> dqs @rax
0000024b`f6609320  0000024b`f68828e0
0000024b`f6609328  0000024b`f651b8e0
0000024b`f6609330  0000024b`f651bb30
0000024b`f6609338  0000024b`f651bd10
0000024b`f6609340  0000024b`f651c570
0000024b`f6609348  0000024b`f651c820
0000024b`f6609350  0000024b`f651c9b0
0000024b`f6609358  0000024b`f651cc00
0000024b`f6609360  0000024b`f651ccd0
0000024b`f6609368  0000024b`f651ced0
0000024b`f6609370  0000024b`f651d0a0
0000024b`f6609378  0000024b`f651d200
0000024b`f6609380  0000024b`f651d370
0000024b`f6609388  0000024b`f651d440
0000024b`f6609390  0000024b`f651d640
0000024b`f6609398  0000024b`f651d7b0

0:000> u . l2
pdb64+0x3a944:
00000000`60efa944 488b0cc8        mov     rcx,qword ptr [rax+rcx*8]
00000000`60efa948 c7413c01000000  mov     dword ptr [rcx+3Ch],1