|
|
|
@53396
|
10 years |
vboxsync |
HostDrivers/Support: Don't try measuring TSC deltas on OSes that …
|
|
|
|
@53329
|
10 years |
vboxsync |
SUPDrv-win.cpp: Must reset enmProcessKind before releasing pNtChild in …
|
|
|
|
@53220
|
10 years |
vboxsync |
SUP: Relax image architecture restrictions so 32-bit resource DLLs …
|
|
|
|
@53051
|
10 years |
vboxsync |
supR3HardenedMonitor_LdrLoadDll: Merged the name mapping log statement …
|
|
|
|
@53045
|
10 years |
vboxsync |
SUP: Reduce LdrLoadDll logging. Still one log statement needing …
|
|
|
|
@53042
|
10 years |
vboxsync |
SUP: CERT_E_CHANING due to signatures rooted in 'Microsoft Digital …
|
|
|
|
@53036
|
10 years |
vboxsync |
SUP: NtCreateFile requires SYNCHRONIZE access when …
|
|
|
|
@53035
|
10 years |
vboxsync |
supHardNtViRdrRead: Cleanup and deal with async i/o in ring-3 just to …
|
|
|
|
@53034
|
10 years |
vboxsync |
SUP: Missing two FILE_SYNCHRONOUS_IO_NONALERT flags, one of which …
|
|
|
|
@53027
|
10 years |
vboxsync |
Forward ported r96507: SUP: Don't wait for yourself to quit, wait on …
|
|
|
|
@53025
|
10 years |
vboxsync |
SUP: corrected child error message and fudge the memory replace ment …
|
|
|
|
@53024
|
10 years |
vboxsync |
SUP: Removed heap debug code.
|
|
|
|
@53022
|
10 years |
vboxsync |
SUP: XP + ATI kludge.
|
|
|
|
@53021
|
10 years |
vboxsync |
SUP: Revised the dgmaster.sys/sakfile.sys hack as it didn't quite work …
|
|
|
|
@53018
|
10 years |
vboxsync |
SUP: corrected log message.
|
|
|
|
@53017
|
10 years |
vboxsync |
SUP: Try to work around sakfile.sys bsod and dgmaster.sys.
|
|
|
|
@53016
|
10 years |
vboxsync |
SUPDrv-win.cpp: Trust the system process a little bit more to make …
|
|
|
|
@53011
|
10 years |
vboxsync |
SUP: instrumentation for debugging possible heap corruption.
|
|
|
|
@53005
|
10 years |
vboxsync |
SUP: Short list of microsoft files that when found not to be signed in …
|
|
|
|
@53003
|
10 years |
vboxsync |
SUP: A bit more logging.
|
|
|
|
@53002
|
10 years |
vboxsync |
VBoxDrv-win.cpp: Keep the error info string from failed VBoxDrv and …
|
|
|
|
@52975
|
10 years |
vboxsync |
build fix
|
|
|
|
@52974
|
10 years |
vboxsync |
SUP: Seems ThreadHideFromDebugger on others might require debugger …
|
|
|
|
@52973
|
10 years |
vboxsync |
SUP: Handle denormalized command line string pointer and always ignore …
|
|
|
|
@52972
|
10 years |
vboxsync |
supR3HardNtChildPurify: Logging improvements.
|
|
|
|
@52969
|
10 years |
vboxsync |
SUP: Restructured the respawn + child purification code to use the …
|
|
|
|
@52968
|
10 years |
vboxsync |
build fix
|
|
|
|
@52967
|
10 years |
vboxsync |
SUP: simplified the ntdll hooking / patching so we can avoid the jump …
|
|
|
|
@52966
|
10 years |
vboxsync |
fixed w8.1 .mrdata hack.
|
|
|
|
@52962
|
10 years |
vboxsync |
SUP: Check the entire NTDLL during process verification now that we're …
|
|
|
|
@52954
|
10 years |
vboxsync |
Tighten the checks on the stub process a little bit (part 1).
|
|
|
|
@52953
|
10 years |
vboxsync |
SUP: Use LdrRegisterDllNotification when available to make sure we see …
|
|
|
|
@52950
|
10 years |
vboxsync |
duh
|
|
|
|
@52949
|
10 years |
vboxsync |
SUP: Do the early init thing on the stub process too.
|
|
|
|
@52947
|
10 years |
vboxsync |
SUP: Implemented early VM process vboxdrv initialization.
|
|
|
|
@52945
|
10 years |
vboxsync |
win.x86 build fix
|
|
|
|
@52943
|
10 years |
vboxsync |
SUP: The child side of early VM process init.
|
|
|
|
@52941
|
10 years |
vboxsync |
Use our own heap in the hope that we can use it before ntdll is really …
|
|
|
|
@52940
|
10 years |
vboxsync |
Eliminating some more kernel32.dll dependencies, marking APIs we like …
|
|
|
|
@52908
|
10 years |
vboxsync |
supdrvNtProtectRelease: Decrement child reference count, don't …
|
|
|
|
@52907
|
10 years |
vboxsync |
SUP: Allow loading of administrator group owned DLLs in addition to …
|
|
|
|
@52906
|
10 years |
vboxsync |
SUP: detect ZoneAlarm installs.
|
|
|
|
@52905
|
10 years |
vboxsync |
SUPDrv-win.cpp: 32-bit + CSRSS hack for working around ZoneAlarm -104 …
|
|
|
|
@52877
|
10 years |
vboxsync |
Import NtQuerySystemInformation.
|
|
|
|
@52875
|
10 years |
vboxsync |
SUP: Log more details on system dlls and hot patching.
|
|
|
|
@52844
|
10 years |
vboxsync |
suplibOsStopService: The rc variable was used uninitialized in one …
|
|
|
|
@52834
|
10 years |
vboxsync |
SUP: Fixed copy and past bug in supR3HardenedWinVerifyCacheIsMatch. …
|
|
|
|
@52795
|
10 years |
vboxsync |
SUP: Deal with comodo's ntdll export and getprocaddress modifications. …
|
|
|
|
@52744
|
10 years |
vboxsync |
terrible experiment with kernel32/base and avast.
|
|
|
|
@52741
|
10 years |
vboxsync |
SUP: Better adversary detection.
|
|
|
|
@52739
|
10 years |
vboxsync |
SUP: Increase fudge factors when there are known trouble makers around.
|
|
|
|
@52738
|
10 years |
vboxsync |
SUPDrv-win.cpp: Forgot to initialize g_pAlpcPortObjectType1.
|
|
|
|
@52737
|
10 years |
vboxsync |
Document the ALPC hack.
|
|
|
|
@52736
|
10 years |
vboxsync |
SUPDrv-win.cpp: Reduce noise.
|
|
|
|
@52735
|
10 years |
vboxsync |
SUPDrv-win.cpp: Alternative way of obtaining the ALPC Port object type.
|
|
|
|
@52709
|
10 years |
vboxsync |
SUP: Improve VBoxDrvStub open error reporting.
|
|
|
|
@52704
|
10 years |
vboxsync |
SUP: Apply redirection to full paths too.
|
|
|
|
@52703
|
10 years |
vboxsync |
SUP: Disable the 2nd ntdll.dll mapping as avast users are seeing …
|
|
|
|
@52690
|
10 years |
vboxsync |
SUP: relax trusted installer for winsxs too.
|
|
|
|
@52679
|
10 years |
vboxsync |
SUP: Cache errors and don't log LdrLoadDll calls before we've …
|
|
|
|
@52668
|
10 years |
vboxsync |
SUP: Wrong flags field in the wShowWindow forwarding feature.
|
|
|
|
@52666
|
10 years |
vboxsync |
SUP: Fix Ctrl-C issue.
|
|
|
|
@52665
|
10 years |
vboxsync |
SUP: Pass along the ShowWindowsFlags.
|
|
|
|
@52656
|
10 years |
vboxsync |
SUP: Fixed for SEP issue where it would deadlock when we tried mapping …
|
|
|
|
@52634
|
10 years |
vboxsync |
SUP: Fix deadlock problem when mounting ISO on vista. (Never all …
|
|
|
|
@52633
|
10 years |
vboxsync |
Fixed ACL issue, shouldn't use GENERIC_* in the deny mask when I want …
|
|
|
|
@52632
|
10 years |
vboxsync |
bugfix in previous commit with some new parent watcher code (disabled).
|
|
|
|
@52627
|
10 years |
vboxsync |
SUP: Fixed comctl32.dll resolving (generic winsxs) and fixed a crash …
|
|
|
|
@52600
|
10 years |
vboxsync |
IPRT: Added support for microsoft timestamp counter signatures. This …
|
|
|
|
@52575
|
10 years |
vboxsync |
SUPDrv: Several fixes, thanks to Mathias Krause.
|
|
|
|
@52541
|
10 years |
vboxsync |
fix
|
|
|
|
@52537
|
10 years |
vboxsync |
IPRT,SUP: First part of timestamp counter signatures support.
|
|
|
|
@52535
|
10 years |
vboxsync |
supR3HardenedWinVerifyCacheInsert: bug fix in collision case.
|
|
|
|
@52529
|
10 years |
vboxsync |
Extended avast cleanup kludge. Added build time option of supporting …
|
|
|
|
@52528
|
10 years |
vboxsync |
SUP: Try reduce the number of error messages about the same DLL.
|
|
|
|
@52524
|
10 years |
vboxsync |
supR3HardNtPuChTriggerInitialImageEvents: Went a little further wrt …
|
|
|
|
@52523
|
10 years |
vboxsync |
SUP: Sabotage thread creation in the stub process and for the initial …
|
|
|
|
@52500
|
10 years |
vboxsync |
supR3HardenedWinIsDesiredRootCA: Changed to blacklisting, added more …
|
|
|
|
@52488
|
10 years |
vboxsync |
SUPHardenedVerifyProcess-win.cpp: Seems NtQueryInformationThread …
|
|
|
|
@52487
|
10 years |
vboxsync |
clearification.
|
|
|
|
@52484
|
10 years |
vboxsync |
SUP: Explained the opengl modulus-by-zero crash (fixed by system32 dll …
|
|
|
|
@52482
|
10 years |
vboxsync |
SUP: TrustedInstaller or LocalSystem, works around tumbleweed desktop …
|
|
|
|
@52453
|
10 years |
vboxsync |
supHardNtViCheckIsOwnedByTrustedInstaller: Workaround for someones …
|
|
|
|
@52448
|
10 years |
vboxsync |
slight adjustment to make it look better when type'ed.
|
|
|
|
@52447
|
10 years |
vboxsync |
Use our own MZ stub binary, one that is compatible with silly Symantec …
|
|
|
|
@52446
|
10 years |
vboxsync |
SUPHardenedVerifyProcess-win.cpp: When doing child purification, we …
|
|
|
|
@52438
|
10 years |
vboxsync |
SUP: Some more confusing trickery.
|
|
|
|
@52433
|
10 years |
vboxsync |
SUP: Avast sleep kludge.
|
|
|
|
@52431
|
10 years |
vboxsync |
SUP: Process the WinVerityTrust todo list from LdrLoadDll, avoid doing …
|
|
|
|
@52426
|
10 years |
vboxsync |
uuids
|
|
|
|
@52425
|
10 years |
vboxsync |
SUPDrv: Revised fix.
|
|
|
|
@52423
|
10 years |
vboxsync |
SUPDrv: Worked around a -104 supR3HardenedWinReSpawn issue. Someone …
|
|
|
|
@52416
|
10 years |
vboxsync |
SUPR3HardenedMainImports-win.cpp: Fixed bug in x86 syscall variation …
|
|
|
|
@52414
|
10 years |
vboxsync |
SUP: Need per thread recursion counters for WinVerifyTrust or we risk …
|
|
|
|
@52406
|
10 years |
vboxsync |
SUP: No need to repeat the IPRT signature check when we just want to …
|
|
|
|
@52404
|
10 years |
vboxsync |
Simplified the checks.
|
|
|
|
@52403
|
10 years |
vboxsync |
SUP,IPRT: Extended RTLdrQueryPropEx with a pvBits parameter, …
|
|
|
|
@52387
|
10 years |
vboxsync |
supdrv-win.cpp: debugging aids.
|
|
|
|
@52376
|
10 years |
vboxsync |
Fixed bug in supHardViUtf16PathStartsWithEx.
|
|
|
|
@52375
|
10 years |
vboxsync |
SUP: Some cleanup and bug hacking.
|
|
|
|
