3

2 related questions: I noticed that in some of the blocks in the graph there are more branches that I would expect. These are not jump tables yes I see, e.g. 3 possible branches. How come? The 2nd issues, which may be related is what does the “try{“ comment mean? enter image description here

or this: enter image description here

Improve this question
3
  • these are due to exception handling.
    – newgre
    Commented Aug 20, 2018 at 11:06
  • Only ask 1 question per post.
    – user202729
    Commented Aug 20, 2018 at 14:14
  • 1
    @user202729 Those are two side-effects of the same behavior. Those two questions are well to be together.
    – NirIzr
    Commented Aug 24, 2018 at 18:13

1 Answer 1

Reset to default
1

IDA is able to parse exception handling tables at least for Visual C++. It annotates the code blocks referenced in the table with the try comments, and also annotates the exception handling code with a comment like "exception handler for try block at XXX". I tend to not use graph view, so I can only guess that the extra edges in the flow graph point from the try block to exception handling blocks.

Improve this answer

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.