Logo Questions Linux Laravel Mysql Ubuntu Git Menu
 

Windbg, how to check memory segment permission?

For example output stack as non-executable, some heap is executable/non-executable..

like image 914
w00d Avatar asked Feb 02 '13 21:02

w00d


1 Answers

!address or !vprot (UM) extentions display virtual memory protection information.

0:000> !address 0038f750
Usage:                  Stack
Allocation Base:        00290000
Base Address:           0038d000
End Address:            00390000
Region Size:            00003000
Type:                   00020000    MEM_PRIVATE
State:                  00001000    MEM_COMMIT
Protect:                00000004    PAGE_READWRITE
More info:              ~0k

0:000> !vprot 0038f750
BaseAddress:       0038f000
AllocationBase:    00290000
AllocationProtect: 00000004  PAGE_READWRITE
RegionSize:        00001000
State:             00001000  MEM_COMMIT
Protect:           00000004  PAGE_READWRITE
Type:              00020000  MEM_PRIVATE
like image 134
sergmat Avatar answered Oct 15 '22 19:10

sergmat