C
change(&a);
read_value(&b);
read_value(&a);
}
Determine which function call reads the value modified by
change and why.
Note that the read_value
function reads the value but does not return it, nor does it store it elsewhere.
A key takeaway from this section:
When analyzing data flow, it is not always necessary for two functions to interact directly.
Sometimes, one function modifies a value in memory, and another function—with no direct connection to the first—accesses that same location via a pointer.
In reverse engineering, tracing these very indirect connections can reveal the program's actual behavior.
@reverseengine
Post #1891
41