Staredit Network > Forums > Modding Discussion > Topic: Bin Dialog overflow
Bin Dialog overflow
Jun 3 2009, 5:01 pm
By: Heinermann  

Jun 3 2009, 5:01 pm Heinermann Post #1

memes memes memes memes memes memes memes memes memes memes memes memes memes memes memes memes memes memes memes memes memes memes memes memes memes

It might be possible to call other function pointers or maybe even custom functions through the use of an overflow in BIN dialog control IDs.

After disassembling Starcraft 1.00, I know that BIN Dialogs are layed out like this:

-> Load dialog with dialog loop function.
The Menu dialog loop consist mainly of 4 cases.
0 = Main Dialog
1 = Standard Cancel
2 = Standard OK
10 = User Array

The "User Array" calls a function pointer in an array that I consider to be the "Control ID Index Array". It's used for menu or static dialogs that have control IDs above 0. This is where the overflow comes in, referencing a control ID beyond the bounds of the array.

For most BIN Dialogs, the control IDs are as follows:
0: Main Dialog
-2: OK
-3: Cancel
Positive: Function Array reference
Negative: Unused/Static index

Thoughts? Attempts?
I havn't tested it out yet.




Options
  Back to forum
Please log in to reply to this topic or to report it.
Members in this topic: None.
[02:39 pm]
Oh_Man -- who's ready for blizzcon? a new era of SC may well be beginning
[02:27 pm]
UndeadStar -- :wob:
[2026-9-12. : 2:28 am]
Symmetry -- :wob:
[2026-9-12. : 2:26 am]
Apos -- :wob:
[2026-9-11. : 9:16 am]
NimoStar -- ever wanted to play melee in installation tileset? Now you can https://staredit.net/topic/18929/
[2026-9-11. : 2:29 am]
Symmetry -- TFW you google a problem and find the answer in a post you made yourself
[2026-9-11. : 1:46 am]
Oh_Man -- How can i change my name here to put [TFE] on the end will thr website let me
[2026-9-10. : 6:02 pm]
Zoan -- of course it isn't full understanding. You could ask "is the mechanism by which this counterexample blows up the ONLY mechanism possible for an initial configuration to blow up?"
[2026-9-10. : 5:48 pm]
Zoan -- ppl do it all the time in PDEs
Please log in to shout.


Members Online: lil-Inferno, Wing Zero, hamsterkoster2