1. Pattern based scanning isn't a guarantee-able method
2. Not as easy to use for finding static data
3. You can't guarantee you won't ever have to update the pattern again. Compiler/linker changes or actual codebase changes can affect something being inlined or the way a statement was compiled into machine code.
4. Pattern scanning requires more information to be stored on hand. If there are changes to the pattern (due to patches, etc) you need to search for, then you have to store 2+ patterns.
5. Pattern scanning isn't exactly abstractable, due to different compiler and linker techniques applied to code.
6. Slower initialize time
7. If a program's internal data structures change, this all becomes moot.
8. etc.
There are currently 3 users browsing this thread. (0 members and 3 guests)
Bookmarks