Skip to content
This repository has been archived by the owner on Jun 11, 2022. It is now read-only.

PAGE_GUARD implementation is incomplete #15

Open
biGGer opened this issue Aug 8, 2016 · 1 comment
Open

PAGE_GUARD implementation is incomplete #15

biGGer opened this issue Aug 8, 2016 · 1 comment

Comments

@biGGer
Copy link

biGGer commented Aug 8, 2016

Because of the 0x1000 minimal page size the PAGE_GUARD flag will silently fall off if anything near the hook gets touched and the lib doesn't do anything to stop it.

One way around it is if the RIP doesn't match our hooked function set the single step trap(via eflags), and restore PAGE_GUARD later inside EXCEPTION_SINGLE_STEP.

Also it would be wise to reuse existing page read/write flags instead of making hooked page writable for no reason.

@stevemk14ebr
Copy link
Owner

You are correct i didn't not implement this yet. If you submit a pull request i will merge it.

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Projects
None yet
Development

No branches or pull requests

2 participants