heap - How does Windows keeps track of the size of VirtualAllocdBlocks? -
i wonder how windows keeps track of size of "virtualallocdblocks". according windbg memory blocks managed in doubly linked lists. struct (_list_entry) contains 2 pointer. how can size (in windbg) of such block , size stored in memory?
0:008> dt _heap 0x00150000 ntdll!_heap ... +0x050 virtualallocdblocks : _list_entry [ 0x3e40000 - 0x13950000 ] ... 0:008> dt _list_entry 0x3e40000 ntdll!_list_entry [ 0x3f50000 - 0x150050 ] +0x000 flink : 0x03f50000 _list_entry [ 0x4050000 - 0x3e40000 ] +0x004 blink : 0x00150050 _list_entry [ 0x3e40000 - 0x13950000 ]
Comments
Post a Comment