OLD | NEW |
1 // Copyright 2013 The Chromium Authors. All rights reserved. | 1 // Copyright 2013 The Chromium Authors. All rights reserved. |
2 // Use of this source code is governed by a BSD-style license that can be | 2 // Use of this source code is governed by a BSD-style license that can be |
3 // found in the LICENSE file. | 3 // found in the LICENSE file. |
4 // | 4 // |
5 // Implementation of NtMapViewOfSection intercept for 32 bit builds. | 5 // Implementation of NtMapViewOfSection intercept for 32 bit builds. |
6 // | 6 // |
7 // TODO(robertshield): Implement the 64 bit intercept. | 7 // TODO(robertshield): Implement the 64 bit intercept. |
8 | 8 |
9 #include "chrome_elf/blacklist/blacklist_interceptions.h" | 9 #include "chrome_elf/blacklist/blacklist_interceptions.h" |
10 | 10 |
(...skipping 151 matching lines...) Expand 10 before | Expand all | Expand 10 after Loading... |
162 } | 162 } |
163 | 163 |
164 bool IsSameAsCurrentProcess(HANDLE process) { | 164 bool IsSameAsCurrentProcess(HANDLE process) { |
165 return (NtCurrentProcess == process) || | 165 return (NtCurrentProcess == process) || |
166 (::GetProcessId(process) == ::GetCurrentProcessId()); | 166 (::GetProcessId(process) == ::GetCurrentProcessId()); |
167 } | 167 } |
168 | 168 |
169 } // namespace | 169 } // namespace |
170 | 170 |
171 namespace blacklist { | 171 namespace blacklist { |
| 172 #if defined(_WIN64) |
| 173 // Allocate storage for the pointer to the old NtMapViewOfSectionFunction. |
| 174 #pragma section(".oldntmap",write,read) |
| 175 __declspec(allocate(".oldntmap")) |
| 176 NtMapViewOfSectionFunction g_nt_map_view_of_section_func = NULL; |
| 177 #endif |
172 | 178 |
173 bool InitializeInterceptImports() { | 179 bool InitializeInterceptImports() { |
174 g_nt_query_section_func = reinterpret_cast<NtQuerySectionFunction>( | 180 g_nt_query_section_func = reinterpret_cast<NtQuerySectionFunction>( |
175 GetNtDllExportByName("NtQuerySection")); | 181 GetNtDllExportByName("NtQuerySection")); |
176 g_nt_query_virtual_memory_func = | 182 g_nt_query_virtual_memory_func = |
177 reinterpret_cast<NtQueryVirtualMemoryFunction>( | 183 reinterpret_cast<NtQueryVirtualMemoryFunction>( |
178 GetNtDllExportByName("NtQueryVirtualMemory")); | 184 GetNtDllExportByName("NtQueryVirtualMemory")); |
179 g_nt_unmap_view_of_section_func = | 185 g_nt_unmap_view_of_section_func = |
180 reinterpret_cast<NtUnmapViewOfSectionFunction>( | 186 reinterpret_cast<NtUnmapViewOfSectionFunction>( |
181 GetNtDllExportByName("NtUnmapViewOfSection")); | 187 GetNtDllExportByName("NtUnmapViewOfSection")); |
(...skipping 40 matching lines...) Expand 10 before | Expand all | Expand 10 after Loading... |
222 if (!module_name.empty() && DllMatch(module_name)) { | 228 if (!module_name.empty() && DllMatch(module_name)) { |
223 DCHECK_NT(g_nt_unmap_view_of_section_func); | 229 DCHECK_NT(g_nt_unmap_view_of_section_func); |
224 g_nt_unmap_view_of_section_func(process, *base); | 230 g_nt_unmap_view_of_section_func(process, *base); |
225 ret = STATUS_UNSUCCESSFUL; | 231 ret = STATUS_UNSUCCESSFUL; |
226 } | 232 } |
227 | 233 |
228 } | 234 } |
229 return ret; | 235 return ret; |
230 } | 236 } |
231 | 237 |
| 238 NTSTATUS WINAPI BlNtMapViewOfSection64( |
| 239 HANDLE section, HANDLE process, PVOID *base, ULONG_PTR zero_bits, |
| 240 SIZE_T commit_size, PLARGE_INTEGER offset, PSIZE_T view_size, |
| 241 SECTION_INHERIT inherit, ULONG allocation_type, ULONG protect) { |
| 242 return BlNtMapViewOfSection(g_nt_map_view_of_section_func, section, process, |
| 243 base, zero_bits, commit_size, offset, view_size, |
| 244 inherit, allocation_type, protect); |
| 245 } |
| 246 |
232 } // namespace blacklist | 247 } // namespace blacklist |
OLD | NEW |