Mirrors/hidden
6
0
Fork 0
mirror of https://github.com/JKornev/hidden synced 2024-06-28 09:52:05 +00:00
Code Issues Projects Releases Wiki Activity

Fix for issue with file\dir name duplication

Browse Source
This commit is contained in:
JKornev 2016-09-07 02:22:03 +03:00
parent 5d1787ffbc
commit 1fdfa70156
2 changed files with 6 additions and 7 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

12
Hidden/FsFilter.c
View File

@ -303,7 +303,7 @@ NTSTATUS CleanFileFullDirectoryInformation(PFILE_FULL_DIR_INFORMATION info, PFLT
moveLength = 0; moveLength = 0;
while (nextInfo->NextEntryOffset != 0) while (nextInfo->NextEntryOffset != 0)
{ {
moveLength += FIELD_OFFSET(FILE_FULL_DIR_INFORMATION, FileName) + nextInfo->FileNameLength; moveLength += nextInfo->NextEntryOffset;
nextInfo = (PFILE_FULL_DIR_INFORMATION)((PUCHAR)nextInfo + nextInfo->NextEntryOffset); nextInfo = (PFILE_FULL_DIR_INFORMATION)((PUCHAR)nextInfo + nextInfo->NextEntryOffset);
} }
@ -387,7 +387,7 @@ NTSTATUS CleanFileBothDirectoryInformation(PFILE_BOTH_DIR_INFORMATION info, PFLT
moveLength = 0; moveLength = 0;
while (nextInfo->NextEntryOffset != 0) while (nextInfo->NextEntryOffset != 0)
{ {
moveLength += FIELD_OFFSET(FILE_BOTH_DIR_INFORMATION, FileName) + nextInfo->FileNameLength; moveLength += nextInfo->NextEntryOffset;
nextInfo = (PFILE_BOTH_DIR_INFORMATION)((PUCHAR)nextInfo + nextInfo->NextEntryOffset); nextInfo = (PFILE_BOTH_DIR_INFORMATION)((PUCHAR)nextInfo + nextInfo->NextEntryOffset);
} }
@ -471,7 +471,7 @@ NTSTATUS CleanFileDirectoryInformation(PFILE_DIRECTORY_INFORMATION info, PFLT_FI
moveLength = 0; moveLength = 0;
while (nextInfo->NextEntryOffset != 0) while (nextInfo->NextEntryOffset != 0)
{ {
moveLength += FIELD_OFFSET(FILE_DIRECTORY_INFORMATION, FileName) + nextInfo->FileNameLength; moveLength += nextInfo->NextEntryOffset;
nextInfo = (PFILE_DIRECTORY_INFORMATION)((PUCHAR)nextInfo + nextInfo->NextEntryOffset); nextInfo = (PFILE_DIRECTORY_INFORMATION)((PUCHAR)nextInfo + nextInfo->NextEntryOffset);
} }
@ -555,7 +555,7 @@ NTSTATUS CleanFileIdFullDirectoryInformation(PFILE_ID_FULL_DIR_INFORMATION info,
moveLength = 0; moveLength = 0;
while (nextInfo->NextEntryOffset != 0) while (nextInfo->NextEntryOffset != 0)
{ {
moveLength += FIELD_OFFSET(FILE_ID_FULL_DIR_INFORMATION, FileName) + nextInfo->FileNameLength; moveLength += nextInfo->NextEntryOffset;
nextInfo = (PFILE_ID_FULL_DIR_INFORMATION)((PUCHAR)nextInfo + nextInfo->NextEntryOffset); nextInfo = (PFILE_ID_FULL_DIR_INFORMATION)((PUCHAR)nextInfo + nextInfo->NextEntryOffset);
} }
@ -639,7 +639,7 @@ NTSTATUS CleanFileIdBothDirectoryInformation(PFILE_ID_BOTH_DIR_INFORMATION info,
moveLength = 0; moveLength = 0;
while (nextInfo->NextEntryOffset != 0) while (nextInfo->NextEntryOffset != 0)
{ {
moveLength += FIELD_OFFSET(FILE_ID_BOTH_DIR_INFORMATION, FileName) + nextInfo->FileNameLength; moveLength += nextInfo->NextEntryOffset;
nextInfo = (PFILE_ID_BOTH_DIR_INFORMATION)((PUCHAR)nextInfo + nextInfo->NextEntryOffset); nextInfo = (PFILE_ID_BOTH_DIR_INFORMATION)((PUCHAR)nextInfo + nextInfo->NextEntryOffset);
} }
@ -719,7 +719,7 @@ NTSTATUS CleanFileNamesInformation(PFILE_NAMES_INFORMATION info, PFLT_FILE_NAME_
moveLength = 0; moveLength = 0;
while (nextInfo->NextEntryOffset != 0) while (nextInfo->NextEntryOffset != 0)
{ {
moveLength += FIELD_OFFSET(FILE_NAMES_INFORMATION, FileName) + nextInfo->FileNameLength; moveLength += nextInfo->NextEntryOffset;
nextInfo = (PFILE_NAMES_INFORMATION)((PUCHAR)nextInfo + nextInfo->NextEntryOffset); nextInfo = (PFILE_NAMES_INFORMATION)((PUCHAR)nextInfo + nextInfo->NextEntryOffset);
} }

1
Hidden/PsMonitor.c
View File

@ -314,7 +314,6 @@ NTSTATUS InitializePsMonitor(PDRIVER_OBJECT DriverObject)
{ {
DestroyPsRuleListContext(g_excludeProcessRules); DestroyPsRuleListContext(g_excludeProcessRules);
DestroyPsRuleListContext(g_protectProcessRules); DestroyPsRuleListContext(g_protectProcessRules);
//DestroyExcludeListContext(g_protectProcessContext);
ExFreePool(normalized.Buffer); ExFreePool(normalized.Buffer);
return status; return status;
} }