Log in

View Full Version : ntdll problem


bcavlin
June 23rd, 2004, 14:51
Hi,

did anyone had a problem when runing trace into with some program (any), and had exception : access violation when reading FFFFFFFF

at point in ntdll

77FA5559 64:A1 00000000 MOV EAX,DWORD PTR FS:[0]

FS is 0000?

I am using Win XP Home SP1 on laptop.

bbotiano
October 1st, 2004, 05:55
I also cannot Trace Into any application without generating errors - even the run trace example on the OllyDbg HomePage

First error is always access violation in Kernel32.DLL

However if in trace options I set it to Trace Over System DLLs it seems to work

XP Pro SP1 on desktop.

Any clues?

blabberer
October 5th, 2004, 03:49
First error is always access violation in Kernel32.DLL

options--->debugging options (alt+o) --->exceptions --->
check mark ignore access violation in kernel32.dll
it should be checked by default did you uncheck ???

fs:0 to fs: blah are called as PROCESS_ENVIRONMENT_BLOCK aka PEB
to get an overview find MATT PIETREKS article on MSJ (i think way back in may 1998 issue )