|
|
@58730
|
9 years |
vboxsync |
supR3HardenedMonitor_LdrLoadDll: Return STATUS_INVALID_IMAGE_FORMAT …
|
|
|
@58405
|
9 years |
vboxsync |
SUPR3HardenedMain.cpp: @page pg_hardening updates.
|
|
|
@58363
|
9 years |
vboxsync |
SUPR3HardenedMain.cpp: Started on a @page about the code, still a lot …
|
|
|
@58339
|
9 years |
vboxsync |
Support/win: doxygen fixes.
|
|
|
@58157
|
9 years |
vboxsync |
Doxygen: @todo fixes
|
|
|
@58132
|
9 years |
vboxsync |
*: Doxygen fixes.
|
|
|
@57501
|
9 years |
vboxsync |
VERR_SUP_VP_NOT_BUILD_CERT_IPE: Dump the certificates. This requires …
|
|
|
@57358
|
9 years |
vboxsync |
*: scm cleanup run.
|
|
|
@57201
|
9 years |
vboxsync |
windows hardning error reporting improvements.
|
|
|
@57161
|
9 years |
vboxsync |
SUPR3HardenedMain-win.cpp: ext-ms-win-devmgmt-policy-l1-1-0.dll and …
|
|
|
@56746
|
9 years |
vboxsync |
SUPHardNt: Need another hack to make VBoxRT.dll load when executing …
|
|
|
@56733
|
9 years |
vboxsync |
SUPHardNt: Allow hardened exectuable binaries in the 'testcase' …
|
|
|
@56293
|
10 years |
vboxsync |
HostDrivers: Updated (C) year.
|
|
|
@54560
|
10 years |
vboxsync |
SUPHardNt: Don't get confused and throw …
|
|
|
@54139
|
10 years |
vboxsync |
SUPR3HardenedMain-win.cpp: Workaround for a process deadlock caused by …
|
|
|
@53821
|
10 years |
vboxsync |
SUPR3HardenedMain-win.cpp: Handle the case where someone uses …
|
|
|
@53220
|
10 years |
vboxsync |
SUP: Relax image architecture restrictions so 32-bit resource DLLs …
|
|
|
@53051
|
10 years |
vboxsync |
supR3HardenedMonitor_LdrLoadDll: Merged the name mapping log statement …
|
|
|
@53045
|
10 years |
vboxsync |
SUP: Reduce LdrLoadDll logging. Still one log statement needing …
|
|
|
@53036
|
10 years |
vboxsync |
SUP: NtCreateFile requires SYNCHRONIZE access when …
|
|
|
@53034
|
10 years |
vboxsync |
SUP: Missing two FILE_SYNCHRONOUS_IO_NONALERT flags, one of which …
|
|
|
@53027
|
10 years |
vboxsync |
Forward ported r96507: SUP: Don't wait for yourself to quit, wait on …
|
|
|
@53025
|
10 years |
vboxsync |
SUP: corrected child error message and fudge the memory replace ment …
|
|
|
@53021
|
10 years |
vboxsync |
SUP: Revised the dgmaster.sys/sakfile.sys hack as it didn't quite work …
|
|
|
@53017
|
10 years |
vboxsync |
SUP: Try to work around sakfile.sys bsod and dgmaster.sys.
|
|
|
@53003
|
10 years |
vboxsync |
SUP: A bit more logging.
|
|
|
@53002
|
10 years |
vboxsync |
VBoxDrv-win.cpp: Keep the error info string from failed VBoxDrv and …
|
|
|
@52975
|
10 years |
vboxsync |
build fix
|
|
|
@52974
|
10 years |
vboxsync |
SUP: Seems ThreadHideFromDebugger on others might require debugger …
|
|
|
@52973
|
10 years |
vboxsync |
SUP: Handle denormalized command line string pointer and always ignore …
|
|
|
@52972
|
10 years |
vboxsync |
supR3HardNtChildPurify: Logging improvements.
|
|
|
@52969
|
10 years |
vboxsync |
SUP: Restructured the respawn + child purification code to use the …
|
|
|
@52968
|
10 years |
vboxsync |
build fix
|
|
|
@52967
|
10 years |
vboxsync |
SUP: simplified the ntdll hooking / patching so we can avoid the jump …
|
|
|
@52962
|
10 years |
vboxsync |
SUP: Check the entire NTDLL during process verification now that we're …
|
|
|
@52954
|
10 years |
vboxsync |
Tighten the checks on the stub process a little bit (part 1).
|
|
|
@52953
|
10 years |
vboxsync |
SUP: Use LdrRegisterDllNotification when available to make sure we see …
|
|
|
@52949
|
10 years |
vboxsync |
SUP: Do the early init thing on the stub process too.
|
|
|
@52947
|
10 years |
vboxsync |
SUP: Implemented early VM process vboxdrv initialization.
|
|
|
@52943
|
10 years |
vboxsync |
SUP: The child side of early VM process init.
|
|
|
@52941
|
10 years |
vboxsync |
Use our own heap in the hope that we can use it before ntdll is really …
|
|
|
@52940
|
10 years |
vboxsync |
Eliminating some more kernel32.dll dependencies, marking APIs we like …
|
|
|
@52906
|
10 years |
vboxsync |
SUP: detect ZoneAlarm installs.
|
|
|
@52875
|
10 years |
vboxsync |
SUP: Log more details on system dlls and hot patching.
|
|
|
@52834
|
10 years |
vboxsync |
SUP: Fixed copy and past bug in supR3HardenedWinVerifyCacheIsMatch. …
|
|
|
@52795
|
10 years |
vboxsync |
SUP: Deal with comodo's ntdll export and getprocaddress modifications. …
|
|
|
@52744
|
10 years |
vboxsync |
terrible experiment with kernel32/base and avast.
|
|
|
@52741
|
10 years |
vboxsync |
SUP: Better adversary detection.
|
|
|
@52739
|
10 years |
vboxsync |
SUP: Increase fudge factors when there are known trouble makers around.
|
|
|
@52709
|
10 years |
vboxsync |
SUP: Improve VBoxDrvStub open error reporting.
|
|
|
@52704
|
10 years |
vboxsync |
SUP: Apply redirection to full paths too.
|
|
|
@52703
|
10 years |
vboxsync |
SUP: Disable the 2nd ntdll.dll mapping as avast users are seeing …
|
|
|
@52679
|
10 years |
vboxsync |
SUP: Cache errors and don't log LdrLoadDll calls before we've …
|
|
|
@52668
|
10 years |
vboxsync |
SUP: Wrong flags field in the wShowWindow forwarding feature.
|
|
|
@52666
|
10 years |
vboxsync |
SUP: Fix Ctrl-C issue.
|
|
|
@52665
|
10 years |
vboxsync |
SUP: Pass along the ShowWindowsFlags.
|
|
|
@52656
|
10 years |
vboxsync |
SUP: Fixed for SEP issue where it would deadlock when we tried mapping …
|
|
|
@52634
|
10 years |
vboxsync |
SUP: Fix deadlock problem when mounting ISO on vista. (Never all …
|
|
|
@52633
|
10 years |
vboxsync |
Fixed ACL issue, shouldn't use GENERIC_* in the deny mask when I want …
|
|
|
@52632
|
10 years |
vboxsync |
bugfix in previous commit with some new parent watcher code (disabled).
|
|
|
@52627
|
10 years |
vboxsync |
SUP: Fixed comctl32.dll resolving (generic winsxs) and fixed a crash …
|
|
|
@52535
|
10 years |
vboxsync |
supR3HardenedWinVerifyCacheInsert: bug fix in collision case.
|
|
|
@52529
|
10 years |
vboxsync |
Extended avast cleanup kludge. Added build time option of supporting …
|
|
|
@52528
|
10 years |
vboxsync |
SUP: Try reduce the number of error messages about the same DLL.
|
|
|
@52524
|
10 years |
vboxsync |
supR3HardNtPuChTriggerInitialImageEvents: Went a little further wrt …
|
|
|
@52523
|
10 years |
vboxsync |
SUP: Sabotage thread creation in the stub process and for the initial …
|
|
|
@52484
|
10 years |
vboxsync |
SUP: Explained the opengl modulus-by-zero crash (fixed by system32 dll …
|
|
|
@52438
|
10 years |
vboxsync |
SUP: Some more confusing trickery.
|
|
|
@52433
|
10 years |
vboxsync |
SUP: Avast sleep kludge.
|
|
|
@52431
|
10 years |
vboxsync |
SUP: Process the WinVerityTrust todo list from LdrLoadDll, avoid doing …
|
|
|
@52426
|
10 years |
vboxsync |
uuids
|
|
|
@52406
|
10 years |
vboxsync |
SUP: No need to repeat the IPRT signature check when we just want to …
|
|
|
@52404
|
10 years |
vboxsync |
Simplified the checks.
|
|
|
@52403
|
10 years |
vboxsync |
SUP,IPRT: Extended RTLdrQueryPropEx with a pvBits parameter, …
|
|
|
@52375
|
10 years |
vboxsync |
SUP: Some cleanup and bug hacking.
|
|
|
@52373
|
10 years |
vboxsync |
SUP: Do our own syscalls.
|
|
|
@52366
|
10 years |
vboxsync |
SUP: Cache images for process verficiation.
|
|
|
@52365
|
10 years |
vboxsync |
sup: Check for TrustedInstaller; accept ProgramFiles and CommonFiles.
|
|
|
@52356
|
10 years |
vboxsync |
SUP: Manual imports.
|
|
|
@52204
|
10 years |
vboxsync |
SUP,LDR: Changed RTLdrGetBits to allow not resolving imports. Combined …
|
|
|
@52176
|
10 years |
vboxsync |
SUP: Fixed windows 7 regression where the child purification code …
|
|
|
@52173
|
10 years |
vboxsync |
build fix
|
|
|
@52169
|
10 years |
vboxsync |
SUP: Added logging capabilities to the hardened stub.
|
|
|
@52163
|
10 years |
vboxsync |
SUP: Make the middle respawn process wait on both parent and child. …
|
|
|
@52160
|
10 years |
vboxsync |
SUP: some cleanups.
|
|
|
@52156
|
10 years |
vboxsync |
SUP: Don't make assumptions about the NTDLL.DLL location in the child …
|
|
|
@52139
|
10 years |
vboxsync |
SUP: child-process purification to avoid sysfer.dll.
|
|
|
@52092
|
10 years |
vboxsync |
SUP: Disable hard error popups from NtCreateSection failures.
|
|
|
@52089
|
10 years |
vboxsync |
SUP: Don't verify the VM selector process (SUPSECMAIN_FLAGS_DONT_OPEN_DEV).
|
|
|
@52039
|
10 years |
vboxsync |
short -> long names.
|
|
|
@52030
|
10 years |
vboxsync |
Forward ported r95010 from 4.3
|
|
|
@51999
|
10 years |
vboxsync |
Removed left over DEBUG_bird bits in iprt/asn1.h and added …
|
|
|
@51945
|
10 years |
vboxsync |
Try again for up to 5 seconds when we see STATUS_NO_SUCH_DEVICE and …
|
|
|
@51936
|
10 years |
vboxsync |
One more define.
|
|
|
@51921
|
10 years |
vboxsync |
Decode a couple of typical \Devices\VBoxDrvStub failure statuses.
|
|
|
@51907
|
10 years |
vboxsync |
SUP: NT status code conversion fix + cleanups.
|
|
|
@51770
|
10 years |
vboxsync |
Merged in iprt++ dev branch.
|