在项目中调用如下代码
PCHAR pBuffer =NULL;
LocalFree(pBuffer); //传入空地址,居然不崩溃
LocalFree 由kernel32.dll导出
IDA打开kernel32.dll,在导出表中找到LocalFree,然后双击进去
IDA View中找到
.text:6B817996 align 10h
.text:6B8179A0 ; Exported entry 954. LocalFree
.text:6B8179A0
.text:6B8179A0 ; =============== S U B R O U T I N E =======================================
.text:6B8179A0
.text:6B8179A0 ; Attributes: bp-based frame
.text:6B8179A0
.text:6B8179A0 ; HLOCAL __stdcall LocalFreeStub(HLOCAL hMem)
.text:6B8179A0 public _LocalFreeStub@4
.text:6B8179A0 _LocalFreeStub@4 proc near ; DATA XREF: .rdata:6B8814D3↓o
.text:6B8179A0 ; .rdata:off_6B88FA78↓o
.text:6B8179A0
.text:6B8179A0 hMem = dword ptr 8
.text:6B8179A0
.text:6B8179A0 mov edi, edi
.text:6B8179A2 push ebp
.text:6B8179A3 mov ebp, esp
.text:6B8179A5 pop ebp
.text:6B8179A6 jmp ds:__imp__LocalFree@4 ; LocalFree(x)//调用到了这里,双击进去
.text:6B8179A6 _LocalFreeStub@4 endp
.text:6B8179A6
.text:6B8179A6 ; ---------------------------------------------------------------------------
到了这里
.idata:6B88054C ; Imports from api-ms-win-core-heap-l2-1-0.dll//mark
.idata:6B88054C ;
.idata:6B88054C ; HLOCAL __stdcall LocalFree(HLOCAL hMem)
.idata:6B88054C extrn __imp__LocalFree@4:dword //到了这里,由上面说的是由api-ms-
调试LocalFree(NULL)
最新推荐文章于 2024-03-28 13:15:44 发布
![](https://img-home.csdnimg.cn/images/20240711042549.png)