wuhailinjerry / edb-debugger

Automatically exported from code.google.com/p/edb-debugger
GNU General Public License v2.0
0 stars 0 forks source link

ASCII Strings in Stack #64

Closed GoogleCodeExporter closed 9 years ago

GoogleCodeExporter commented 9 years ago
Created attachment 6
Here is

When I setup working arguments for application, i could not see they as string
in stack except very first aka program path and name(argv[0]). All other
arguments shown as pointers but their ASCII representation is absent.May be
they are too short - my case is:
user@ubuntu$./args c in out
But afaik even "61 00" is ASCIIZ string:)

Original issue reported on code.google.com by evan.teran on 3 Oct 2012 at 3:21

GoogleCodeExporter commented 9 years ago

Original comment by evan.teran on 3 Oct 2012 at 4:26

Attachments:

GoogleCodeExporter commented 9 years ago
This is more of a feature than a bug. There has to be a lower limit for what is 
automatically considered a string. If it is set too low, then even random data 
will be considered a string half of the time (ASCII is about 50% of the 
possible byte values).

So, by default the minimum length for automatic detection is 4. This is 
configurable though. If you open the options dialog, and switch to the 
"Debugging" tab. There is a field for "Minimum length for string detection". 
Just change this to a smaller value.

However, like I said, too small and you will get a LOT of false positives.

Original comment by evan.teran on 3 Oct 2012 at 4:27