Windows error 0x00000088, 136

Win8 - Unhandled exception in Windows.UI.Xaml.dll

I've got some strange behavior while debugging/running my metro app. During drag'n'drop the screen will be refreshed. I'd added some functionality to block binded properties from refreshing while drag'n'drop is in progress. But sometimes the app crash, but in stead of throwing some exception which I can debug, all I [...] read more

What exactly does the lb instruction do?

I have an exam coming up, and one of the practice problems was: > Assume that $t0 contains the value 0x12121212 and $t1 contains the address > 0x1000000. > > Assume that the memory data, starting from address 0x1000000 is: 88 77 66 55. > > What will be the [...] read more

Stream from IP Camera very jittery on VLC

This question is a prologue to the one I previously asked here. I'm working on an IP camera project that is based on TI OMAP-L138. All in all, the H264 encoded video is streamed via live555 libraries over RTSP. For Live555 I'm using deviceSource based framed source. However, when I [...] read more

Debugging SEGV_ACCERR with invalid pointer

I have a SIGSEGV/SEGV_ACCERR crash like this: Thread 0 Crashed: 0 libobjc.A.dylib 0x39c69f2a _objc_release + 10 1 CoreFoundation 0x31cf4441 __CFAutoreleasePoolPop + 17 2 Foundation 0x326c8185 __NSThreadPerformPerform + 605 3 CoreFoundation 0x31d86683 __CFRUNLOOP_IS_CALLING_OUT_TO_A_SOURCE0_PERFORM_FUNCTION__ + 15 4 CoreFoundation 0x31d85ee9 __CFRunLoopDoSources0 + 213 5 CoreFoundation 0x31d84cb7 __CFRunLoopRun + 647 6 CoreFoundation 0x31cf7ebd _CFRunLoopRunSpecific [...] read more

DWARF - How to find the prologue end/epilogue start addresses of functions in a given binary?

I have an ARM binary of which I need to find exactly at which addresses its function's prologues end and the epilogues begin. In other words, I need the boundaries of the function bodies. For instance, if I have a function whose assembly is something like: 0x00000320 <+0>: push {r7, [...] read more

What IARG_EXPLICIT_MEMORY_EA should be used for?

I am willing to instrument lea instructions, followed by a call to PIN_SafeCopy() to capture the content of the memory. I tried with IARG_MEMORY_READ_EA but it did not work. So I move to IARG_EXPLICIT_MEMORY_EA as it is written in the fine manual that it is usefull to instrument lea instructions. [...] read more

Why does my canvas noise function always only appear red?

I'm trying to apply a noise effect to my canvas, based on a codepen I saw, which in turn appears to be very similar to an SO answer. I want to produce a "screen" of randomly transparent pixels, but instead of that I get a field that's completely opaque red. [...] read more

How to calculate the virtual address for an ELF program header?

I've wrote to file some assembly instructions and I would like to make them executable. However, I'm messing up something with the program headers. I've read the whole man page about the ELF header, but I didn't understand much. #include <elf.h> #include <unistd.h> #include <fcntl.h> #include <sys/stat.h> void MakeExecutable(char *codeBuffer, [...] read more

Why are my core dumps missing an NT_FILE note?

I've set "ulimit -c unlimited" on my Fedora system so segfaults generate core dump files. This is working. I've seen an NT_FILE note mentioned at these URLs: ELF core file format Anatomy of an ELF core file But my core files only contain these notes: $ readelf --notes core.simple.11 Notes [...] read more

C - Get File Bytes as Unsigned Int

I need the bytes of a BIN file converted to a unsigned int, in this format (JavaScript): p.write4(shellcode.add32(0x00000000), 0x00000be9); p.write4(shellcode.add32(0x00000004), 0x90909000); p.write4(shellcode.add32(0x00000008), 0x90909090); p.write4(shellcode.add32(0x0000000c), 0x90909090); p.write4(shellcode.add32(0x00000010), 0x0082b955); p.write4(shellcode.add32(0x00000014), 0x8948c000); p.write4(shellcode.add32(0x00000018), 0x415741e5); p.write4(shellcode.add32(0x0000001c), 0x41554156); p.write4(shellcode.add32(0x00000020), 0x83485354); p.write4(shellcode.add32(0x00000024), 0x320f18ec); p.write4(shellcode.add32(0x00000028), 0x89d58949); p.write4(shellcode.add32(0x0000002c), 0x64b948c0); p.write4(shellcode.add32(0x00000030), 0x77737069); p.write4(shellcode.add32(0x00000034), 0x49000000); p.write4(shellcode.add32(0x00000038), 0x4120e5c1); p.write4(shellcode.add32(0x0000003c), 0x000200bc); p.write4(shellcode.add32(0x00000040), [...] read more

uPP Device Driver is dropping data from buffer

I have written code for a uPP device driver to be used with an OMAPL138 based custom board for data acquisition through a camera lens. The code for my device driver is: /* * A device driver for the Texas Instruments * Universal Paralllel Port (UPP) * * Modified by: [...] read more

gdb - where is function called from?

This seems like a simple question... I have a library (no source code) which calls one of my own functions (cbp_Gen, the fptr is passed at some point previously). I have a breakpoint in that function and I would like to know where in my code it's all called from. [...] read more

dwarfdump output with overlapping ranges

I am using the dwarfdump command with these options -fFpPEo against a binary file. The output looks like this: fde: < 7><0x00000000:0x00000092><clear><fde offset 0x00005d70 length: 0x00000030><eh offset none> 0x00000000: <off cfa=00(r13) > 0x00000004: <off cfa=24(r13) > <off r4=-24(cfa) > <off r5=-20(cfa) > <off r6=-16(cfa) > <off r7=-12(cfa) > <off r8=-8(cfa) [...] read more

How to correct stack location arm-none-eabi-gcc?

I try to create a bare metal code using the standard lib C. I started with an assembly code .section .isr_vector .global _Reset _Reset: B Reset_Handler /* Reset */ B . /* Undefined */ B . /* SWI */ B . /* Prefetch Abort */ B . /* Data Abort [...] read more

Interrupt handler won't run

I'm working on an stm32l467 and trying to run an ISR when i push the user-push-button. Everything looks to be setup correctly. I have looked at the registers in the debugger (Keil uV) and everything looks good, but when i push the button I end up in the default handler [...] read more

Access violation reading location 0x00000088 C++

I cannot for the life of me figure out this error Access violation reading location 0x00000088, I am programming a script that controls the leds on my keyboard, and this error pops up after only about 5 keystrokes. Full error is Exception thrown at 0x10013871 (msvcp140d.dll) in TacoKeyBoard2.exe: 0xC0000005: Access [...] read more

GDB not copting desired string (Buffer Overflow Practice)

Ok so I am trying to learn about buffer overflows and there is this simple program that is vulnerable of a BoF because it copies the first argument into a buffer of 5 characters. In the source code, there is a function called bar that never gets called by the [...] read more

When program finishes final line, it will set register r0 to 0

I have code at the end of my program that is as follows: ldrb r2, [r1, #12] sub r2, r2, #48 cmp r2, r7 beq Check sub r0, r0, #1 Check add r0, #1 END If cmp r2, r7 decides r2 & r7 are equal, the program jumps to Check [...] read more

Issues rendering to texture in D3D9

I'm trying to render the world to a texture inside a hook for a game, but the image ends up this. Since it's rendering distant objects in front of near ones, it looks like an issue with incorrect z-buffer render states, but nothing changes even when I set them before [...] read more

Crashing during unlocking achievement

Once the updateAchievement(int percentage) function is called the game crashes as below The game crashes with > Fatal signal 11 (SIGSEGV) at 0x00000088 (code=1), thread 6584 (Thread-6615) at static public void updateAchievement(int percentage) { if(gpgAvailable){ Games.Achievements.unlock(((RampJump)currentContext).getGameHelper().getApiClient(), achievementIDs[currentAchievementID]); } } The achievements gets unlocked but the game crashes immediately. I am [...] read more

C++, WIN32, WndProc to Member Function Crash (Access violation at 0x88)

I've been writing a win32 wrapper class, and I've come across a problem: Because each instance of the class has a window, I've enclosed the this pointer in the user info space using SetWindowLongPtrW(), allowing me to call a message handler from the static WndProc function. This works fine: I [...] read more