Stack Overflow
Stack Overflow

Questions tagged [seh]

Microsoft Structured Exception Handling (SEH) is the native exception handling mechanism for Windows.

Microsoft Structured Exception Handling (SEH) is the native exception handling mechanism for Windows.

177 questions
0
votes
1 answer

Qt5Core.dll crashing

I have an application that uses Qt, it works on some machines (Windows 7 64bits, Windows Server Standard 32bits), and on other machines (Windows Server 2012 R2 64bits, Windows 10 Pro 64bits) it gives an SEH exception. I've been trying to debug this…
mathiasfk
  • 1,278
  • 1
  • 19
  • 38
0
votes
1 answer

Using Structured Exception Handling (SEH) for monitoring usage of guarded pages

I have application without source code that makes direct write to device with use of proxy DLL library that only does one thing, returns memory pointer by calling exported function "GetDataPointer". I would like to make a replacement for this…
cafebabe_t
  • 65
  • 1
  • 9
0
votes
0 answers

ESP after SEH Exception with same program on different computers

Below are a few articles that exploit different programs by using ESP after the SEH exception to POPAD back to a controllable part of the stack. The other article demonstrates stack pivoting finding suitable code inside a loaded module to pivot the…
PaulthePirate
  • 11
  • 1
0
votes
2 answers

Inline asm assigning to 'FS:0': handler not registered as safe handler

I am trying to follow this article on Win32 Structured Exception handling. The article is quite old, but still considered a very good introduction to the subject. I am trying to compile a code sample from the article reproduced below -…
user1720897
  • 1,216
  • 3
  • 12
  • 27
0
votes
1 answer

TestStack White doesn't detect an SEHException

I'm writing a few tests for a managed/unmanaged Winform application. Some of the bugs occur in the unmanaged part, and result in the process terminating due to an unhandled System.Runtime.InteropServices.SEHException exception . When this exception…
zmbq
  • 38,013
  • 14
  • 101
  • 171
0
votes
0 answers

What is ntdll!_SEH_epilog ? Is the first occurence of it the place where the real issue is?

Does calling the ntdll!_SEH_epilog function, synonym of emmiting a system SEH exception ? I have dozens of dump files which display the same stacktrace. It's in a mixed C++/C# environment. CLR's legacyCorruptedStateExceptionsPolicy enabled="true"…
Stephane Rolland
  • 38,876
  • 35
  • 121
  • 169
0
votes
1 answer

what qualifies as an "asynchronous" signal on windows?

I was reading a reply to a question in the pintool mailing list here. Its mentioned that the delivery of asynchronous signals is delayed till the end of an analysis routine in a pintool. I'm curious about what exceptions in Windows qualify as an…
user277465
0
votes
1 answer

C++ exceptions in VC, without SEH

Is it possible to use VC (Preferably one of the latest versions) and using C++ exceptions, that are not implemented over SEH? NOTE - I don't mean catching SEH exceptions using C++ catch clause (/Eha \ /Ehsc), I mean using C++ exceptions without…
user972014
  • 3,296
  • 6
  • 49
  • 89
0
votes
2 answers

EXCEPTION_CONTINUE_EXECUTION strange behavour

I wrote code void SEHtest(int i) { int s = 0; __try { cout << "code1" << endl; int j = 1 / s; cout << "code2" << endl; } __except((s = 1, i)) { cout << "code3" << endl; } cout << "code4" << endl; return; } int main() { …
user1761982
  • 143
  • 1
  • 2
  • 10
0
votes
0 answers

Interpreting Procdump Exception code 00000006, and the difference between E06D7363.J and E06D7363.msc

I am analyzing a dump file of a c++ application, generated by ProcDump. The log file generated by ProcDump contains tons of Exception: C0000005.ACCESS_VIOLATION which are easily understandable as Access Violations. However I have not managed to…
Stephane Rolland
  • 38,876
  • 35
  • 121
  • 169
0
votes
1 answer

Mixing Win32 SEH with heap-allocated stack frames

Is there a way to escape the "one big stack" model of Win32 without crippling SEH? I'd like to be able to allocate stack frames on the heap, as a way to implement coroutines. However, my code is currently depending on SEH, and this article, a few…
zildjohn01
  • 11,339
  • 6
  • 52
  • 58
0
votes
1 answer

SEH handler cause compiler warnings and errors

I use a SEH handler in my code, like this: __try { // code... } __except(EXCEPTION_EXECUTE_HANDLER) { TRACE(_T("Exception")); } but get the following compiler errors: e:\test.cpp(3310): warning C4509: nonstandard extension used:…
alancc
  • 487
  • 2
  • 24
  • 68
0
votes
1 answer

WP 8 app runs fine under native mode debugging (Release mode) but crashes without the debugger

The app in question uses both native and managed code. The managed code provides just the UI layer while it links with a native dll which performs bulk of operations. The native dll links with some other static dlls. Now the issue is when I run the…
bashrc
  • 4,725
  • 1
  • 22
  • 49
0
votes
0 answers

how does SEH based exploit bypass DEP and ASLR?

I am new in SEH based exploit Why didn't we put our return address directly in SE handler to jump to our shellcode? (with no safeSEH) can't any body explain the reason of using pop pop ret? I read something that said SEH bypass ASLR and DEP, but…
Sani
  • 1
  • 2
0
votes
0 answers

How to get the file name that failed to load from EXCEPTION_RECORD?

I registered vectored exception handler. Using this article I manage to get the object's name from EXCEPTION_POINTERS structure pExceptionInfo: char* objectName =…
theateist
  • 13,879
  • 17
  • 69
  • 109
1 2 3
…
11
12