Translated Exception

Runtime software exceptions (such as C++ exceptions, Volume 3, page 84) can be translated by custom exception handlers (Volume 1, page 471) into other exceptions by changing exception data. This is different from nested exceptions (Volume 2, page 305) where another exception is thrown. One example of such possible translation we recently encountered when looked at raw stack data (!teb -> dps) having signs of hidden exceptions (multiple RaiseException calls, Volume 1, page 271) and also CLR execution residue (valid return addresses of clr module). In addition to final invalid handle exception (Volume 2, page 269) and one hidden access violation there were many exception codes c0000027. Google search pointed to the article about skipped C++ destructors16 that prompted me to introduce this pattern.


16 http://www.codeproject.com/Articles/46294/When-a-C-destructor-did-not-run-Part-2

..................Content has been hidden....................

You can't read the all page of ebook, please click here login for view all page.
Reset