DebugBar forums / bug:confict with ksafe!!!!

llydd · 2011-01-03 22:47:41

ksafe download link:http://www.ijinshan.com/ws/index.shtml
ksafe and debugger bar all have install a inline hook in ws2_32!recv
when ie exit,debugger bar will uninstall the inline hook:ws2_32!recv,but the backup code is relative address,when ie step in ws2_32!recv,crash

fabrice · 2011-01-04 08:56:19

Hi,

It looks like the same problem as with Virus Scan 8.0.

You can see this thread :

http://www.my-debugbar.com/forum/p1441- … html#p1441

You can disable the hook in DebugBar from the advanced options (as decribed in the previous thread) and this should correct the crash, but you'll loose the advanced sniffing options.

Hope this helps.

Regards.

llydd · 2011-01-04 16:14:06

it's debugbar's bug...

fabrice · 2011-01-04 16:30:11

Well, I don't have ksafe source code to check what's going on, so I don't know. DebugBar code looks good on my side.

It depends on when ksafe is installing the hook (before or after DebugBar hook) and when it's removing it (before or after DebugBar hook).

llydd · 2011-01-07 18:08:50

ksafe install hook before debugbar,so when debugbar install recv hook,it backup ksafe's inline hook and relocation the jmp code.when ie closed,debugbar will restore recv inline hook by the backup code.but the backup code has been relocation by debugger,if debugbar rerelocation the jmp code,ie will work ok.

fabrice · 2011-01-07 20:21:29

which debugger are you talking about ?

llydd · 2011-01-07 20:45:18

fabrice wrote:
which debugger are you talking about ?

debugger?debugbar?windbg?

fabrice · 2011-01-07 21:52:52

"debugger". You are saying : "but the backup code has been relocation by debugger". So I'm asking which debugger.

DebugBar is not a debugger. It is an IE add-on; it does not use any debugger.

llydd · 2011-01-09 16:39:50

sorry,"but the backup code has been relocation by debugbar"

fabrice · 2011-01-11 19:32:49

Did you try to disable the advanced DebugBar feature to see if it solves your problem ?

I won't be able to work on this in the short term unfortunately.

Announcement

#1 2011-01-03 22:47:41

bug:confict with ksafe!!!!

#2 2011-01-04 08:56:19

Re: bug:confict with ksafe!!!!

#3 2011-01-04 16:14:06

Re: bug:confict with ksafe!!!!

#4 2011-01-04 16:30:11

Re: bug:confict with ksafe!!!!

#5 2011-01-07 18:08:50

Re: bug:confict with ksafe!!!!

#6 2011-01-07 20:21:29

Re: bug:confict with ksafe!!!!

#7 2011-01-07 20:45:18

Re: bug:confict with ksafe!!!!

fabrice wrote:

#8 2011-01-07 21:52:52

Re: bug:confict with ksafe!!!!

#9 2011-01-09 16:39:50

Re: bug:confict with ksafe!!!!

#10 2011-01-11 19:32:49

Re: bug:confict with ksafe!!!!