Home | Contact Us | FAQ | Search & Site Map | Link to Us
Sign In | Join | Other 45 Sites in Network
HomeAnnouncementsFree MagazinesWhite PapersSubmit Content
Discussion GroupsASP.NETWindows FormsLanguages.NET FrameworkVisual Studio.NET
Articles.NET FrameworkASP.NETToolsWindows Forms
.NET DirectoryOpen Source ProjectsUser GroupsWeb Resources
Related Topics
Visual Basic 6SQL ServerMS AccessOther DB ProductsMS Server ProductsMore Topics ...

.NET Forum / .NET Framework / CLR / November 2006

Tip: Looking for answers? Try searching our database.

Memory access of unmanaged DLL

Thread view: 
Enable EMail Alerts  Start New Thread
Thread rating: 
Ruben - 22 Nov 2006 16:56 GMT
Hi!

I need to know, how much power an unmanaged DLL has about the "managed
memory".
Can I access memory of the managed code from a loaded unmanaged DLL?

The point is: Does a intruder, who injected code into the unmanged DLL
via e.g. a buffer overflow, have the possibility to read and modify
data in the managed memory?

Thank you!
 Ruben
Mattias Sjögren - 22 Nov 2006 20:42 GMT
>Can I access memory of the managed code from a loaded unmanaged DLL?

Yes

>The point is: Does a intruder, who injected code into the unmanged DLL
>via e.g. a buffer overflow, have the possibility to read and modify
>data in the managed memory?

Absolutely.

Mattias

Signature

Mattias Sjögren [C# MVP]  mattias @ mvps.org
http://www.msjogren.net/dotnet/ | http://www.dotnetinterop.com
Please reply only to the newsgroup.

Ben Voigt - 24 Nov 2006 16:34 GMT
>>Can I access memory of the managed code from a loaded unmanaged DLL?
>
> Yes

This capability is essentially useless for any program that has to work
reliably, because the GC will move stuff around in the managed heap.

>>The point is: Does a intruder, who injected code into the unmanged DLL
>>via e.g. a buffer overflow, have the possibility to read and modify
>>data in the managed memory?
>
> Absolutely.

But an information leak is a problem even if it isn't reliable.

> Mattias

Rate this thread:







Free Magazines

Get these publications absolutely FREE for up to 12 months. There are no hidden fees and no obligation. Simply choose a title, complete the application form and submit it. Read more ...

Oracle MagazineNetwork ComputingComputer WorldBio-IT WorldeWeekInformation WeekInfosecurity
 
Sign In
Join
My Latest Posts
My Monitored Threads
My Blog
My Photo Gallery
My Profile
My Homepage

Start New Thread
Enable EMail Alerts
Rate this Thread



©2008 Advenet LLC   Privacy Policy - Terms of Use
This website includes both content owned or controlled by Advenet as well as content owned or controlled by third parties.