CODEWITHSUNDEEP
windbg
daisy
daisy

Reputation: 23541

What's the Allocation Base shown in the "address" command of windbg?

When you use !address command to find the module that owns an memory address, it shows both a Allocation Base and Base Address.

So Allocation Base is where the DLL image gets loaded (same as the output of the lm command), what about the Base Address then?

Upvotes: 2

Views: 1080

Answers (1)

Lior Ohana
Lior Ohana

Reputation: 3527

AllocationBase refers the start address of the allocated block in memory. This block can hold segments of different types. When checking for a specific address, the base address will tell you where the block it belongs to starts and the base address will point to the segment start address.

Check this link, a great tutorial from MSDN: Memory User Mode Tutorial

Upvotes: 2

Related Questions