corelan/windbglib

MemoryException: Memory exception at 0x0 target virtual address

Closed this issue · 5 comments

when i use !py mona it is right but when i use modules it is wrong
0:014:x86> !py mona modules
Hold on...
[+] Command used:
!py mona.py modules

---------- Mona command started on 2017-06-22 16:12:56 (v2.0, rev 576) ----------
[+] Processing arguments and criteria
- Pointer access level : X
[+] Generating module info table, hang on...
- Processing modules


Traceback (most recent call last):
File "mona.py", line 18384, in main
commands[command].parseProc(opts)
File "mona.py", line 11441, in procShowMODULES
modulestosearch = getModulesToQuery(modulecriteria)
File "mona.py", line 5620, in getModulesToQuery
populateModuleInfo()
File "mona.py", line 5731, in populateModuleInfo
allmodules=dbg.getAllModules()
File "C:\WinDDK\7600.16385.1\Debuggers\windbglib.py", line 1160, in getAllModules
getModulesFromPEB()
File "C:\WinDDK\7600.16385.1\Debuggers\windbglib.py", line 369, in getModulesFromPEB
thismod = pykd.loadUnicodeString(mod.BaseDllName).encode("utf8")
MemoryException: Memory exception at 0x0 target virtual address


what should i do thank you

would you mind sharing more details (f.i. what process is it attached to) so I can try to reproduce the issue ?

thanks

when i use mona in a vulnerability, it always wrong . my environment win7 x64,software is kmpplayer 3.0.0.1440,but when i use windbg load kmp i use !py mona modules is right ,but when i run it,it will wrong。

thank you for you answer ,what else you will need?

just to rule out some things - would you mind trying the latest mona.py version (r577 or up) & see if that one fixes the issue?
If not, I'll have to set up a system with the application you're using, to see if I can reproduce.

What language is your system in? What are the system locale systems ? (keyboard, etc)

thanks

Peter

let me know if the issue is still there - closing for now