Closed GoogleCodeExporter closed 9 years ago
well scanmem didnt allow me either, not a surprise
Original comment by evan.teran
on 3 Oct 2012 at 5:22
http://img252.imageshack.us/img252/3186/scanhi.png
Original comment by evan.teran
on 3 Oct 2012 at 5:23
[deleted comment]
sorry the quality was crappy http://img41.imageshack.us/img41/2324/scant.png
when i opened the procces it read it, when i run it, just like in olly it
should open it, sadly says that has an error and shuts down the program, in
return everything goes to 0
Original comment by evan.teran
on 3 Oct 2012 at 5:23
Interesting, I will look into this.
Original comment by evan.teran
on 3 Oct 2012 at 5:23
ok, i don't really know if its a bug but i cant attach chromium memory either,
on ollybdg you cant attach it, but you can do so on cheat engine, i think it
will give a + to edb, just saying, anyways did you found why or what am i doing
wrong ?
Original comment by evan.teran
on 3 Oct 2012 at 5:23
Yea, this is a weird one. But here's my guess...
I am guessing that chrome (and possibly Tibia also) use the "debug myself"
trick to prevent debugging.
Basically what this means is that an application can either ptrace itself (or
have a multiple binaries which all ptrace each other which is what I suspect of
chrome). Since an application can only have one debugger attached at a time,
edb gets a permission denied error.
I'll investigate if this is the case and get back to you. If it is in fact the
case, it would be tricky to work around.
Original comment by evan.teran
on 3 Oct 2012 at 5:24
thanks again evan <3
ill wait your answer :)
Original comment by evan.teran
on 3 Oct 2012 at 5:24
I think that this had two possible causes.
1. The application takes measures to prevent debugging, so not a whole lot we
can do about it.
2. I've noticed that some video drivers (I'm looking at you nVidia) mess with
signal processing and end up preventing edb from working correctly.
In both cases, the problem is not fixable by fixing edb. The cause may be
something else, but I've been only able to reproduce it by one of these two
means.
Original comment by evan.teran
on 18 Jan 2014 at 4:38
Original issue reported on code.google.com by
evan.teran
on 3 Oct 2012 at 3:22