The vc debugger says the the structure members for ntHeaderBaseAddress can't be evaluated. I think this a pointer arithmetic problem. What am I doing wrong?Code:baseAddress = (IMAGE_DOS_HEADER*)MapViewOfFile(fileMapHandle, FILE_MAP_READ, 0, 0, 0 ); if( baseAddress != NULL ) { ntHeaderBaseAddress = (IMAGE_NT_HEADERS*)baseAddress + baseAddress->e_lfanew; return true; } else { return 0; }
silk.odyssey
I'd bet that's where you error is. I can quite put my finger on it, but something about that equation just rubs me the wrong way. Maybe it's the scope of the typecast, maybe it's adding the member... But that's where I'd look.Code:(IMAGE_NT_HEADERS*)baseAddress + baseAddress->e_lfanew;
And this looks like straight C - is it?
IIRC you can not add two pointers together. You can subtract a pointer from another pointer and can add an integer to a pointer, but you can not add two pointers together.
I'm adding a pointer to an integer. e_lfanew is defined as a long.
Last edited by silk.odyssey; 08-18-2004 at 05:29 AM.
silk.odyssey
> ntHeaderBaseAddress = (IMAGE_NT_HEADERS*)baseAddress + baseAddress->e_lfanew;
Remember that pointer arithmetic takes the size of what the pointer points to into account.
Example, if sizeof(IMAGE_NT_HEADERS) is 10, and e_lfanew is say 4, then
ntHeaderBaseAddress is 40 bytes away.
If you dance barefoot on the broken glass of undefined behaviour, you've got to expect the occasional cut.
If at first you don't succeed, try writing your phone number on the exam paper.
