News:

Happy New Year! Yes, the current one, not a previous one; this is a new post, we swear!

Main Menu

Range of hardware breakpoints

Started by sdfg, November 08, 2008, 06:10:46 PM

Previous topic - Next topic

0 Members and 1 Guest are viewing this topic.

sdfg

Is there any way to set execute hardware breakpoints for every instruction in a certain range of memory in ollydbg?
dey see me trollin'
dey hatin'

iago

I'm pretty sure that isn't possible due to hardware limitations.

Skywing

What are you trying to accomplish?  One thing you could do would be to reprotect pages as noaccess pages (or unset the executable page protection flag, if you have NX enforcement enabled).  However, this gives you page-level granularity, which may be too large to be usable depending on what you're doing.

You are only provided support for up to four instruction fetch breakpoints on x86/x64.

Other than those two options, the other is to replace the first byte of each instruction with an int3, remembering the previous values to restore after the breakpoint exceptions are hit.  If OllyDbg has an extensibility mechanism, perhaps you could do that with a plugin.

(As an aside, I would highly recommend switching to the more full-featured WinDbg, which does absolutely have an extensiblity mechanism capable of writing a plugin to do that, if you really wanted to.)