开发者

Windbg: How to do break-on-write on a kernel data structure?

I'm new to WinDbg, and I wanted to understand if it was possible to do 开发者_如何学Pythona break-on-write on a kernel data structure (could be a structure or an array), similar to what can be done in gdb ?


Lets say the structure you are interested has a member that you want to break-in when it gets modified. Use:

ba w4 "address of structure + offset to interesting member"

ba = break on access

w4 = writing of anything from the start address provided for a length of 4 bytes.

0

上一篇:

下一篇:

精彩评论

暂无评论...
验证码 换一张
取 消

最新问答

问答排行榜