Welcome to OGeek Q&A Community for programmer and developer-Open, Learning and Share
Welcome To Ask or Share your Answers For Others

Categories

0 votes
279 views
in Technique[技术] by (71.8m points)

assembly - How the stack is overwritten via deferencing MOV operation [Assembler x86]?

I am learning how to use Ghidra Tool and I have a question of how to interpret one function. This is the simplified version:

Take this scenario: the location [RBP – 0x40], of the stack, has this value: 0xFFFF7710 (indeed this value is an address of another element in the stack... but for the question, this is irrelevant).

Now we store the address of that value in a register:

LEA RAX, [RBP – 0x40]

And finally, we execute these two instructions:

MOV EDX, 0xFFFF5520
MOV [RAX], DL

The final content in the stack [RBP – 0x40] is 0xFFFF7720, 0x00000020 or 0xFFFFFF20 ?

Is overwritten all the content of the stack [RBP – 0x40] via the last MOV operation or only the last byte ?

Thanks.

question from:https://stackoverflow.com/questions/65541444/how-the-stack-is-overwritten-via-deferencing-mov-operation-assembler-x86

与恶龙缠斗过久,自身亦成为恶龙;凝视深渊过久,深渊将回以凝视…
Welcome To Ask or Share your Answers For Others

1 Reply

0 votes
by (71.8m points)

The result is 0xFFFF7720. Storing a byte to memory does not affect the other bytes of that word. (You could test it...)


与恶龙缠斗过久,自身亦成为恶龙;凝视深渊过久,深渊将回以凝视…
OGeek|极客中国-欢迎来到极客的世界,一个免费开放的程序员编程交流平台!开放,进步,分享!让技术改变生活,让极客改变未来! Welcome to OGeek Q&A Community for programmer and developer-Open, Learning and Share
Click Here to Ask a Question

...