[Bug 10273] satisfy SafeDisc 2.x heuristic API analyzer by "adjusting" API exports/entry statistics of wine builtins

wine-bugs at winehq.org wine-bugs at winehq.org
Thu Nov 1 19:34:45 CDT 2007


http://bugs.winehq.org/show_bug.cgi?id=10273


Stefan Dösinger <stefandoesinger at gmx.at> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |stefandoesinger at gmx.at




--- Comment #1 from Stefan Dösinger <stefandoesinger at gmx.at>  2007-11-01 19:34:45 ---
I don't know if this is related, but Ivan Leo talked about some hook testing
done by safedisk 2. Appart of other things, it checks if all CALLs have a RET.
It started at the exported functions, but eventually dived into Linux
libraries. GCC generated code which broke these checks, e.g.

...
xxx:
pop eax;
jmp eax;
...
call xxx
...

To find the address of the code in memory or somesuch.

Could this be the statistical heuristic you see?


-- 
Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are watching all bug changes.


More information about the wine-bugs mailing list