1

I want to read memory of process A but when the process A is disposed. I have run A, it displays address of some variable, I closed it.

I have run B where I input address of A's variable. It causes error "Access violation...".

I use Borland C++ builder and Windows 7.

Is there any way to watch ram when process is closed? Maybe some tools will help me. Could you give me names of tools to read memory by absolute address after memory deallocation?
Maybe it should be some sort of leak detectors?

4

2 回答 2

2

我不知道它关闭后,但在运行时,你可以使用ReadProcessMemory()withCreateRemoteThread

于 2013-02-10T17:46:04.387 回答
2

在大多数系统上,独立的进程存在于完全独立的虚拟地址空间中。您在一个进程中看到的指针在另一个进程中完全没有意义。

因此,如果你想这样做,你必须明确地共享内存;我不是 Windows 专家,但我相信这CreateSharedMemory()可能是您需要的。

于 2013-02-10T17:46:27.143 回答