Mirrors/hidden
6
0
Fork 0
mirror of https://github.com/JKornev/hidden synced 2024-06-16 03:58:04 +00:00
Code Issues Projects Releases Wiki Activity

Threads protection fix

Browse Source
This commit is contained in:
JKornev 2018-12-20 02:53:28 +03:00
parent a780193b7c
commit 0e9e814c28
1 changed files with 2 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
Hidden/PsMonitor.c
View File

@ -153,7 +153,7 @@ OB_PREOP_CALLBACK_STATUS ThreadPreCallback(PVOID RegistrationContext, POB_PRE_OP
if (OperationInformation->KernelHandle)
return OB_PREOP_SUCCESS;
LogInfo("Thread object operation, destPid:%d, destTid:%d, srcTid:%d, oper:%s, space:%s",
LogInfo("Thread object operation, destPid:%d, destTid:%d, srcPid:%d, oper:%s, space:%s",
(ULONG)PsGetThreadProcessId(OperationInformation->Object),
(ULONG)PsGetThreadId(OperationInformation->Object),
(ULONG)PsGetCurrentProcessId(),
@ -161,7 +161,7 @@ OB_PREOP_CALLBACK_STATUS ThreadPreCallback(PVOID RegistrationContext, POB_PRE_OP
(OperationInformation->KernelHandle ? "kernel" : "user")
);
if (!CheckProtectedOperation(PsGetCurrentProcessId(), PsGetProcessId(OperationInformation->Object)))
if (!CheckProtectedOperation(PsGetCurrentProcessId(), PsGetThreadProcessId(OperationInformation->Object)))
{
LogInfo("Allow protected thread access from %d to %d", (ULONG)PsGetCurrentProcessId(), (ULONG)PsGetThreadProcessId(OperationInformation->Object));
return OB_PREOP_SUCCESS;