📄 subject_43608.htm
字号:
<p>
序号:43608 发表者:阿蝌 发表日期:2003-06-12 15:00:52
<br>主题:WriteProcessMemory()能否对非用户分区的内存进行操作?
<br>内容:请分别说明win9x/2000的情况?
<br><a href="javascript:history.go(-1)">返回上页</a><br><a href=http://www.copathway.com/cndevforum/>访问论坛</a></p>
<hr size=1>
<blockquote><p>
回复者:阿蝌 回复日期:2003-06-12 17:38:53
<br>内容:顶顶
<br>
<a href="javascript:history.go(-1)">返回上页</a><br><a href=http://www.copathway.com/cndevforum/>访问论坛</a></p></blockquote>
<hr size=1>
<blockquote><p>
回复者:Neil Gan 回复日期:2003-06-13 05:12:44
<br>内容:9x: I don't know much. I remember that all process in 9x share the memory with address >= 0x80000000, but I'm not sure.<BR><BR>NT/2000: the address >= 0x80000000 is reserved for the operating system use. you don't have access to this area.( there is an option in boot.ini, it can set 3GB as the user address space, in this case, 0xc0000000)<BR><BR>for addres <0x80000000, if and only if 1.you have PROCESS_VM_WRITE and PROCESS_VM_OPERATION access to the process and 2.the address is mapped, you can write to the address, even when the memory has read-only protect attribute.<BR><BR>
<br>
<a href="javascript:history.go(-1)">返回上页</a><br><a href=http://www.copathway.com/cndevforum/>访问论坛</a></p></blockquote>
<hr size=1>
<blockquote><p>
回复者:阿蝌 回复日期:2003-06-13 10:03:35
<br>内容:I write some code in 9x and 2000 for test,but I am not sure my idea is right.<BR><BR>9x: you can write memory in every address except >=0xC0000000 ,some article saied that 9x do not protect any address,so the address >=0xC0000000 may be also can be write.<BR>2000: you can't write >= 0x80000000 or <=0000ffff <BR>in 9x and 2000 write 0x00000000 is succeed,can you tell me why?
<br>
<a href="javascript:history.go(-1)">返回上页</a><br><a href=http://www.copathway.com/cndevforum/>访问论坛</a></p></blockquote>
<hr size=1>
<blockquote><p>
<font color=red>答案被接受</font><br>回复者:Neil Gan 回复日期:2003-06-13 11:01:11
<br>内容:writting to 0x00000000 succeeded? impossible!! it is NULL address.<BR><BR>Please refer to Jeffrey Richter's book for the memory layout in 9x and NT/2000<BR>
<br>
<a href="javascript:history.go(-1)">返回上页</a><br><a href=http://www.copathway.com/cndevforum/>访问论坛</a></p></blockquote>
<hr size=1>
<blockquote><p>
回复者:阿蝌 回复日期:2003-06-13 11:22:22
<br>内容:You are right.I made a mistake.
<br>
<a href="javascript:history.go(-1)">返回上页</a><br><a href=http://www.copathway.com/cndevforum/>访问论坛</a></p></blockquote>
⌨️ 快捷键说明
复制代码
Ctrl + C
搜索代码
Ctrl + F
全屏模式
F11
切换主题
Ctrl + Shift + D
显示快捷键
?
增大字号
Ctrl + =
减小字号
Ctrl + -