Package vivisect :: Package analysis :: Package generic :: Module pointertables
[hide private]
[frames] | no frames]

Module pointertables

source code

A quick and dirty analysis pass looking for pointer arrays. Pointers in code regions are trixy because they might be immediate operands on instructions. However, if they are pointer-length aligned *and* back-to-back they are probably really pointers...

Functions [hide private]
 
handleArray(vw, plist) source code
 
analyze(vw) source code