Log in

View Full Version : SEH in Vista with ASLR?


Dj_Oggy
March 12th, 2008, 08:48
Hi,

i have question.I trying to implement low lvl seh routine in ASM for win vista with Vista ASLR feature enabled.With ASLR instruction push fs:[0] isnt working.

Know anyone,how install seh handler for ASLR compiled programs?

thx

evlncrn8
March 12th, 2008, 11:14
think you need to use encodepointer as well as using seh entries in the pe file...

Dj_Oggy
March 12th, 2008, 11:42
some encoding/decoding i saw there,but i never seen address of my handler.

I found place,where are saved addresses of handlers,but i cant find code,where are activated.

disavowed
March 14th, 2008, 15:05
aslr shouldn't affect whether or not seh via fs:[0] works. just don't use hardcoded addresses and if you do be sure to include reloc fixups.

aionescu
March 16th, 2008, 17:07
If the application is built with /SAFESEH you'll need to add RISC/x64-style SEH Table entries for each handler.

Dj_Oggy
March 17th, 2008, 02:28
can be some example for better explain? thx