
Hi,
Recently im start to do reverse a patch from a media file format that make the software crash!
I got the patch, diff against unpatched version found vulnerable version and then try to find calls to that function to find exactly which function are calling until my vulnerable function,So far so good.
But now i cannot find any of my media file(wmv) values in my player software in non of those functions(to change those values and try to trigger the bug)!
Anyone here have any experience in How i can find values in memory that exist in file too or which value from my file entering the software and ending where ?
Is there any other procedure to follow ?
Thanks