3

2 related questions: I noticed that in some of the blocks in the graph there are more branches that I would expect. These are not jump tables yes I see, e.g. 3 possible branches. How come? The 2nd issues, which may be related is what does the “try{“ comment mean? enter image description here

or this: enter image description here

3
  • these are due to exception handling. – newgre Aug 20 '18 at 11:06
  • Only ask 1 question per post. – user202729 Aug 20 '18 at 14:14
  • 1
    @user202729 Those are two side-effects of the same behavior. Those two questions are well to be together. – NirIzr Aug 24 '18 at 18:13
1

IDA is able to parse exception handling tables at least for Visual C++. It annotates the code blocks referenced in the table with the try comments, and also annotates the exception handling code with a comment like "exception handler for try block at XXX". I tend to not use graph view, so I can only guess that the extra edges in the flow graph point from the try block to exception handling blocks.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.