该楼层疑似违规已被系统折叠 隐藏此楼查看此楼
答案很简单,在打印时有个隐性类型转换,在C代码中看不出来,但在汇编当中就暴露了:
00401322 |. E8 A1050000 |CALL ; |\fgetc00401327 |. 8845 FF |MOV BYTE PTR SS:[EBP-1],AL ; |0040132A |. 0FB645 FF |MOVZX EAX,BYTE PTR SS:[EBP-1] ; |0040132E |. 3C 0A |CMP AL,0A ; |00401330 |. 74 16 |JE SHORT 诡异?.00401348 ; |00401332 |. 0FBE45 FF |MOVSX EAX,BYTE PTR SS:[EBP-1] ; |00401336 |. 894424 04 |MOV DWORD PTR SS:[ESP+4],EAX ; |0040133A |. C70424 003040>|MOV DWORD PTR SS:[ESP],问题?.00403000 ; |ASCII "%c"00401341 |. E8 7A050000 |CALL ; \printf
注意MOVSX EAX,BYTE PTR SS:[EBP-1],把ch的值赋给eax,要做符号扩展,之后MOV DWORD PTR SS:[ESP+4],EAX,压栈的是eax,eax是32位寄存器,所以能够打印。