Comments on: FinalExceptionHandler https://www.dumpanalysis.org/blog/index.php/2009/04/24/finalexceptionhandler/ Structural and Behavioral Patterns for Software Diagnostics, Forensics and Prognostics Wed, 06 May 2026 12:02:32 +0000 http://wordpress.org/?v=2.3.3 By: Dmitry Vostokov https://www.dumpanalysis.org/blog/index.php/2009/04/24/finalexceptionhandler/#comment-72753 Dmitry Vostokov Thu, 30 Apr 2009 06:49:26 +0000 https://www.dumpanalysis.org/blog/index.php/2009/04/24/finalexceptionhandler/#comment-72753 Thanks for pointing to SEHOP article! Thanks for pointing to SEHOP article!

]]> By: Yuhong Bao https://www.dumpanalysis.org/blog/index.php/2009/04/24/finalexceptionhandler/#comment-72750 Yuhong Bao Thu, 30 Apr 2009 06:04:04 +0000 https://www.dumpanalysis.org/blog/index.php/2009/04/24/finalexceptionhandler/#comment-72750 FinalExceptionHandler is part of a feature in Vista SP1 and Server 2008 called SEHOP: http://blogs.technet.com/srd/archive/2009/02/02/preventing-the-exploitation-of-seh-overwrites-with-sehop.aspx FinalExceptionHandler is part of a feature in Vista SP1 and Server 2008 called SEHOP:
http://blogs.technet.com/srd/archive/2009/02/02/preventing-the-exploitation-of-seh-overwrites-with-sehop.aspx

]]> By: Dmitry Vostokov https://www.dumpanalysis.org/blog/index.php/2009/04/24/finalexceptionhandler/#comment-72038 Dmitry Vostokov Fri, 24 Apr 2009 14:36:01 +0000 https://www.dumpanalysis.org/blog/index.php/2009/04/24/finalexceptionhandler/#comment-72038 I see it also in the exception chain: 0:000> !exchain 0022fdd8: kernel32!_except_handler4+0 (7670e289) 0022ffc4: ntdll!_except_handler4+0 (77b29834) 0022ffe4: ntdll!FinalExceptionHandler+0 (77bc75de) I see it also in the exception chain:

0:000> !exchain
0022fdd8: kernel32!_except_handler4+0 (7670e289)
0022ffc4: ntdll!_except_handler4+0 (77b29834)
0022ffe4: ntdll!FinalExceptionHandler+0 (77bc75de)

]]>