Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

WinDbg is unable to disassemble the x86/x64 UD1 instruction #228

Open
JamesMcNellis opened this issue Sep 18, 2024 · 0 comments
Open

WinDbg is unable to disassemble the x86/x64 UD1 instruction #228

JamesMcNellis opened this issue Sep 18, 2024 · 0 comments

Comments

@JamesMcNellis
Copy link

In a 64-bit debugging session:

0:000> u 00005555`5bb50b24
[symbol redacted]
00005555`5bb50b24 67              ???
00005555`5bb50b25 0f              ???
00005555`5bb50b26 b94002cccc      mov     ecx,0CCCC0240h
00005555`5bb50b2b cc              int     3
00005555`5bb50b2c cc              int     3
00005555`5bb50b2d cc              int     3
00005555`5bb50b2e cc              int     3
00005555`5bb50b2f cc              int     3

67 is an address size prefix; 0f b9 is the opcode for UD1. Clang/LLVM generates this instruction for various fatal runtime errors (like int 29h in Visual C++).

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant