CODEWITHSUNDEEP
debuggingmemorypermissionswindbg
w00d
w00d

Reputation: 5596

Windbg, how to check memory segment permission?

For example output stack as non-executable, some heap is executable/non-executable..

Upvotes: 7

Views: 10314

Answers (1)

Serg
Serg

Reputation: 2180

!address or !vprot (UM) extentions display virtual memory protection information.

0:000> !address 0038f750
Usage:                  Stack
Allocation Base:        00290000
Base Address:           0038d000
End Address:            00390000
Region Size:            00003000
Type:                   00020000    MEM_PRIVATE
State:                  00001000    MEM_COMMIT
Protect:                00000004    PAGE_READWRITE
More info:              ~0k

0:000> !vprot 0038f750
BaseAddress:       0038f000
AllocationBase:    00290000
AllocationProtect: 00000004  PAGE_READWRITE
RegionSize:        00001000
State:             00001000  MEM_COMMIT
Protect:           00000004  PAGE_READWRITE
Type:              00020000  MEM_PRIVATE

Upvotes: 13

Related Questions