You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Currently, memory that is manipulated using these functions is either out-of-scope, or leads to many false-positives. To counter this, it's better to not instrument the implementation of these functions, but to intercept them and feed the processed data directly into the detector.
Be aware, just wrapping the exported symbols in ucrtbase, kernel, etc. is not sufficient, as some parts are directly inlined into the application, or aliased, or dispatched to specific implementations.
Currently, memory that is manipulated using these functions is either out-of-scope, or leads to many false-positives. To counter this, it's better to not instrument the implementation of these functions, but to intercept them and feed the processed data directly into the detector.
Be aware, just wrapping the exported symbols in
ucrtbase
,kernel
, etc. is not sufficient, as some parts are directly inlined into the application, or aliased, or dispatched to specific implementations.See also the function interception in DrMemory: https://github.com/DynamoRIO/drmemory/blob/d261a4dc254016355f64ebf5eff9187dccb34eb2/drmemory/replace.c#L955
The text was updated successfully, but these errors were encountered: