Win64 function markup
Myria
myriachan at cox.net
Wed Dec 27 17:54:35 PST 2006
Does Yasm support the mandatory function markup required by x86-64 Windows?
This is the ".pdata" section. I don't see any mention of it in the
documentation or the mailing list archives.
I have yet to find an assembler other than MASM that supports .pdata.
There's plenty of code for Win64 using other assemblers, but such programs
are invalid Win64 executables. If an exception occurs in such assembly
code, even recoverable ones (stack guard page, etc.), the process will
disappear without an error message. ntdll.dll doesn't display an error
because it assumes that a buffer overflow has occurred, and that showing a
message box has a good chance of executing shellcode. This mechanism is
stronger on Vista than 2003.
Melissa
More information about the yasm-devel
mailing list