开发者

Windbg: How to do break-on-write on a kernel data structure?

开发者 https://www.devze.com 2023-04-04 04:46 出处:网络
I\'m new to WinDbg, and I wanted to understand if it was possible to do 开发者_如何学Pythona break-on-write on a kernel data structure (could be a structure or an array), similar to what can be done i

I'm new to WinDbg, and I wanted to understand if it was possible to do 开发者_如何学Pythona break-on-write on a kernel data structure (could be a structure or an array), similar to what can be done in gdb ?


Lets say the structure you are interested has a member that you want to break-in when it gets modified. Use:

ba w4 "address of structure + offset to interesting member"

ba = break on access

w4 = writing of anything from the start address provided for a length of 4 bytes.

0

精彩评论

暂无评论...
验证码 换一张
取 消