wow64: Truncate too-large regions from NtQueryVirtualMemory(MemoryRegionInformation).

AllocationBase + RegionSize should not exceed the highest WoW user address.

wow64: Truncate too-large regions from NtQueryVirtualMemory(MemoryRegionInformation).
06321ba5 · Tim Clem · Alexandre Julliard · 62fbfe87 · 06321ba5
Commit 06321ba5 authored Nov 08, 2022 by Tim Clem Committed by Alexandre Julliard Nov 09, 2022
Show whitespace changes
Inline Side-by-side

Showing with 2 additions and 0 deletions

virtual.c dlls/wow64/virtual.c +2 -0

No files found.
--- a/dlls/wow64/virtual.c
+++ b/dlls/wow64/virtual.c
@@ -444,6 +444,8 @@ NTSTATUS WINAPI wow64_NtQueryVirtualMemory( UINT *args )
                info32->CommitSize = info.CommitSize;
                info32->PartitionId = info.PartitionId;
                info32->NodePreference = info.NodePreference;
+                if ((ULONG_PTR)info.AllocationBase + info.RegionSize > highest_user_address)
+                    info32->RegionSize = highest_user_address - (ULONG_PTR)info.AllocationBase + 1;
            }
        }
        res_len = sizeof(MEMORY_REGION_INFORMATION32);