Changeset 52092 in vbox for trunk/src

Timestamp:

Jul 18, 2014 7:14:33 AM (11 years ago)

Author:

vboxsync

Message:

SUP: Disable hard error popups from NtCreateSection failures.

Location:

trunk/src/VBox

Files:

• HostDrivers/Support/win/SUPR3HardenedMain-win.cpp (modified) (2 diffs)
• Runtime/r3/win/ntdll-mini-implib.def (modified) (2 diffs)

trunk/src/VBox/HostDrivers/Support/win/SUPR3HardenedMain-win.cpp

@@ -947 +947 @@
 DECLHIDDEN(void) supR3HardenedWinInstallHooks(void)
 {
+    NTSTATUS rcNt;
+
 #ifndef VBOX_WITHOUT_DEBUGGER_CHECKS
     /*
@@ -952 +954 @@
      * notifications from ending up in the debugger.
      */
-    NTSTATUS rcNt = NtSetInformationThread(GetCurrentThread(), ThreadHideFromDebugger, NULL, 0);
+    rcNt = NtSetInformationThread(GetCurrentThread(), ThreadHideFromDebugger, NULL, 0);
     if (!NT_SUCCESS(rcNt))
-        supR3HardenedFatalMsg("supR3HardenedWinInstallHooks", kSupInitOp_Misc, VERR_NO_MEMORY,
+        supR3HardenedFatalMsg("supR3HardenedWinInstallHooks", kSupInitOp_Misc, VERR_GENERAL_FAILURE,
                               "NtSetInformationThread/ThreadHideFromDebugger failed: %#x\n", rcNt);
 #endif
+
+    /*
+     * Disable hard error popups so we can quietly refuse images to be loaded.
+     */
+    ULONG fHardErr = 0;
+    rcNt = NtQueryInformationProcess(NtCurrentProcess(), ProcessDefaultHardErrorMode, &fHardErr, sizeof(fHardErr), NULL);
+    if (!NT_SUCCESS(rcNt))
+        supR3HardenedFatalMsg("supR3HardenedWinInstallHooks", kSupInitOp_Misc, VERR_GENERAL_FAILURE,
+                              "NtQueryInformationProcess/ProcessDefaultHardErrorMode failed: %#x\n", rcNt);
+    if (fHardErr & PROCESS_HARDERR_CRITICAL_ERROR)
+    {
+        fHardErr &= ~PROCESS_HARDERR_CRITICAL_ERROR;
+        rcNt = NtSetInformationProcess(NtCurrentProcess(), ProcessDefaultHardErrorMode, &fHardErr, sizeof(fHardErr));
+        if (!NT_SUCCESS(rcNt))
+            supR3HardenedFatalMsg("supR3HardenedWinInstallHooks", kSupInitOp_Misc, VERR_GENERAL_FAILURE,
+                                  "NtSetInformationProcess/ProcessDefaultHardErrorMode failed: %#x\n", rcNt);
+    }
 
     /*

trunk/src/VBox/Runtime/r3/win/ntdll-mini-implib.def

@@ -51 +51 @@
     NtReadFile                            ;;= _NtReadFile@36
     NtReadVirtualMemory                   ;;= _NtReadVirtualMemory@20
+    NtResumeProcess                       ;;= _NtResumeProcess@4
+    NtResumeThread                        ;;= _NtResumeThread@8
     NtSetInformationFile                  ;;= _NtSetInformationFile@20
     NtSetInformationObject                ;;= _NtSetInformationObject@16
+    NtSetInformationProcess               ;;= _NtSetInformationProcess@16
     NtSetInformationThread                ;;= _NtSetInformationThread@16
     NtSetTimerResolution                  ;;= _NtSetTimerResolution@12
+    NtSuspendProcess                      ;;= _NtSuspendProcess@4
+    NtSuspendThread                       ;;= _NtSuspendThread@8
     NtWriteFile                           ;;= _NtWriteFile@36
     NtWriteVirtualMemory                  ;;= _NtWriteVirtualMemory@20
@@ -63 +68 @@
     RtlCopySid                            ;;= _RtlCopySid@12
     RtlCreateAcl                          ;;= _RtlCreateAcl@12
+    RtlCreateProcessParameters            ;;= _RtlCreateProcessParameters@40
     RtlCreateSecurityDescriptor           ;;= _RtlCreateSecurityDescriptor@8
+    RtlCreateUserProcess                  ;;= _RtlCreateUserProcess@40
+    RtlDestroyProcessParameters           ;;= _RtlDestroyProcessParameters@4
     RtlGetVersion                         ;;= _RtlGetVersion@4
     RtlInitializeSid                      ;;= _RtlInitializeSid@12