马上注册,结交更多好友,享用更多功能^_^
您需要 登录 才可以下载或查看,没有账号?立即注册
x
本帖最后由 kangels 于 2013-3-19 10:23 编辑
4 H. }8 S$ B& U; c. e) o' B& {: a
- y5 l# i7 I) x, Y8 ^丢失的类型信息- r9 u; f3 ~- x- _
猜测
, z E0 T7 e$ L; Q2 v! J指针变量应该存储两方面的信息:地址,类型信息0 ^4 g! X& d% W+ {( Z
; d2 y% h. r# [8 ^+ l
实证" X! ?- ^& t$ t5 _) O5 w: u, T
用sizeof(),float *,int*,double *....都是4字节没有存储类型信息只有地址信息" y. I* ?5 I# j$ T* H
反汇编一段代码来看看
9 `6 o& K) ?' k' L实例1:4 O/ X: p/ L( _9 b) V' w8 i% T
#include <stdio.h> int gi; int * pi; void main(int argc, char **argv) { pi = &gi; *pi = 12; } 1: #include <stdio.h> 2: int gi; 3: int * pi; 4: void main(int argc, char **argv) 5: { 00411370 push ebp 00411371 mov ebp,esp 00411373 sub esp,0C0h 00411379 push ebx 0041137A push esi 0041137B push edi 0041137C lea edi,[ebp+FFFFFF40h] 00411382 mov ecx,30h 00411387 mov eax,0CCCCCCCCh 0041138C rep stos dword ptr es:[edi] 6: pi = &gi; 0041138E mov dword ptr ds:[00417140h],417144h 7: *pi = 12; 00411398 mov eax,dword ptr ds:[00417140h] 0041139D mov dword ptr [eax],0Ch 8: } 004113A3 xor eax,eax 004113A5 pop edi 004113A6 pop esi 004113A7 pop ebx 004113A8 mov esp,ebp 004113AA pop ebp 004113AB ret
3 A4 t2 U7 i1 _# {
$ C- j$ X5 Q3 H' T% x$ d. T实例2:
) s9 Z% V! b U3 s9 L#include <stdio.h> short gs; short * ps; void main(int argc, char **argv) { ps = &gs; *ps = 12; } 0 b* B8 ?8 K3 ~$ O9 G
1: #include <stdio.h> 2: short gs; 3: short * ps; 4: void main(int argc, char **argv) 5: { 00411370 push ebp 00411371 mov ebp,esp 00411373 sub esp,0C0h 00411379 push ebx 0041137A push esi 0041137B push edi 0041137C lea edi,[ebp+FFFFFF40h] 00411382 mov ecx,30h 00411387 mov eax,0CCCCCCCCh 0041138C rep stos dword ptr es:[edi] 6: ps = &gs; 0041138E mov dword ptr ds:[00417140h],417144h 7: *ps = 12; 00411398 mov eax,0Ch 0041139D mov ecx,dword ptr ds:[00417140h] 004113A3 mov word ptr [ecx],ax 8: } 004113A6 xor eax,eax 004113A8 pop edi 004113A9 pop esi 004113AA pop ebx 004113AB mov esp,ebp 004113AD pop ebp 004113AE ret 3 m) B9 r- [2 D. u8 n0 J8 d
& E6 W* [6 B. [# d% K2 M$ k, \ i7 u
实例3:' d2 f2 ]& q5 a& z. `, Q
#include <stdio.h> char gc; char * pc; void main(int argc, char **argv) { pc = &gc; *pc = 12; } " Q4 g9 A! W- W4 r
1: #include <stdio.h> 2: char gc; 3: char * pc; 4: void main(int argc, char **argv) 5: { 00411370 push ebp 00411371 mov ebp,esp 00411373 sub esp,0C0h 00411379 push ebx 0041137A push esi 0041137B push edi 0041137C lea edi,[ebp+FFFFFF40h] 00411382 mov ecx,30h 00411387 mov eax,0CCCCCCCCh 0041138C rep stos dword ptr es:[edi] 6: pc = &gc; 0041138E mov dword ptr ds:[00417140h],417144h 7: *pc = 12; 00411398 mov eax,dword ptr ds:[00417140h] 0041139D mov byte ptr [eax],0Ch 8: } 004113A0 xor eax,eax 004113A2 pop edi 004113A3 pop esi 004113A4 pop ebx 004113A5 mov esp,ebp 004113A7 pop ebp 004113A8 ret
( J" j. ]5 y; t; I ~: b9 c
5 @7 s+ e' O6 h# R6 _% }3 w; n: `可以看出指针的类型信息决定了赋值/读取时读/写多少个字节。
0 K. ]* ~5 |( {! Q读/写多少字节的信息不是存放在指针变量中,而是放到了与该地址相关的赋值指令中。
1 a9 D1 X7 J9 J$ l- R$ S |