Changeset 80217 in vbox for trunk/src

Timestamp:

Aug 10, 2019 2:50:30 AM (5 years ago)

Author:

vboxsync

Message:

SUPHardNt: scm and comments

File:

• trunk/src/VBox/HostDrivers/Support/win/SUPR3HardenedMain-win.cpp (modified) (2 diffs)

trunk/src/VBox/HostDrivers/Support/win/SUPR3HardenedMain-win.cpp

@@ -2976 +2976 @@
      * This differs from the first function in that is no a system call and
      * we're at the mercy of the handwritten assembly.
+     *
+     * Note! We depend on all waits up past the patching to be non-altertable,
+     *       otherwise an APC might slip by us.
      */
     uint8_t * const pbKiUserApcDispatcher = (uint8_t *)(uintptr_t)pfnKiUserApcDispatcher;
@@ -5162 +5165 @@
         /*
          * Try shake anyone (e.g. easyhook) patching process creation code in
-         * kernelbase, kernel32 or ntdll so they won't so easily cause the child 
+         * kernelbase, kernel32 or ntdll so they won't so easily cause the child
          * to crash when we respawn and purify it.
          */
-        SUP_DPRINTF(("supR3HardenedWinInit: doing limited purification...\n"));
+        SUP_DPRINTF(("supR3HardenedWinInit: Performing a limited self purification...\n"));
         uint32_t cFixes = 0;
         rc = supHardenedWinVerifyProcess(NtCurrentProcess(), NtCurrentThread(), SUPHARDNTVPKIND_SELF_PURIFICATION_LIMITED,