| #
ea02a2ff |
| 04-Dec-2024 |
Pali Rohár <[email protected]> |
windows: Check for SizeOfOptionalHeader before dereferencing OptionalHeader
offsetof(IMAGE_OPTIONAL_HEADER, DataDirectory) is the minimal size of variable length OptionalHeader (IMAGE_OPTIONAL_HEADE
windows: Check for SizeOfOptionalHeader before dereferencing OptionalHeader
offsetof(IMAGE_OPTIONAL_HEADER, DataDirectory) is the minimal size of variable length OptionalHeader (IMAGE_OPTIONAL_HEADER) structure.
show more ...
|
| #
76c06ea6 |
| 21-Nov-2024 |
Pali Rohár <[email protected]> |
windows: Do not manually load ntdll.dll library
Per Windows Internals, Part 1, Image Loader section, the ntdll.dll library is always loaded into every process on all NT systems.
So remove code whic
windows: Do not manually load ntdll.dll library
Per Windows Internals, Part 1, Image Loader section, the ntdll.dll library is always loaded into every process on all NT systems.
So remove code which dynamically loads ntdll.dll library via LoadLibrary() function and remove also code which changes error reporting mode (used just for LoadLibrary) as both are not needed.
Also Microsoft C/C++ compilers optimize EXE applications in a way which expects that the ntdll.dll library is loaded as the first module into the process before the main EXE module itself.
show more ...
|
| #
ff9f39c7 |
| 08-May-2023 |
Pali Rohár <[email protected]> |
libpci: Add Windows physmem support for PCIe ECAM access
It requires either access to NT Section \Device\PhysicalMemory (or compatible) or to have available kernel32.dll VxDCall2 function or w32skrn
libpci: Add Windows physmem support for PCIe ECAM access
It requires either access to NT Section \Device\PhysicalMemory (or compatible) or to have available kernel32.dll VxDCall2 function or w32skrnl.dll DPMI function.
show more ...
|