例如输出堆栈为不可执行,一些堆是可执行/不可执行的..
问问题
7797 次
1 回答
12
!address或!vprot (UM) 扩展显示虚拟内存保护信息。
0:000> !address 0038f750
Usage: Stack
Allocation Base: 00290000
Base Address: 0038d000
End Address: 00390000
Region Size: 00003000
Type: 00020000 MEM_PRIVATE
State: 00001000 MEM_COMMIT
Protect: 00000004 PAGE_READWRITE
More info: ~0k
0:000> !vprot 0038f750
BaseAddress: 0038f000
AllocationBase: 00290000
AllocationProtect: 00000004 PAGE_READWRITE
RegionSize: 00001000
State: 00001000 MEM_COMMIT
Protect: 00000004 PAGE_READWRITE
Type: 00020000 MEM_PRIVATE
于 2013-02-03T05:48:51.340 回答