wow64: Truncate too-large regions from NtQueryVirtualMemory(MemoryBasicInformation).

BaseAddress + RegionSize should not exceed the highest WoW user address.

wow64: Truncate too-large regions from NtQueryVirtualMemory(MemoryBasicInformation).
d47bdb3e · Tim Clem · Alexandre Julliard · 464d3c86 · d47bdb3e
Commit d47bdb3e authored Nov 08, 2022 by Tim Clem Committed by Alexandre Julliard Nov 09, 2022
Show whitespace changes
Inline Side-by-side

Showing with 2 additions and 0 deletions

virtual.c dlls/wow64/virtual.c +2 -0

No files found.
--- a/dlls/wow64/virtual.c
+++ b/dlls/wow64/virtual.c
@@ -399,6 +399,8 @@ NTSTATUS WINAPI wow64_NtQueryVirtualMemory( UINT *args )
                info32->State = info.State;
                info32->Protect = info.Protect;
                info32->Type = info.Type;
+                if ((ULONG_PTR)info.BaseAddress + info.RegionSize > highest_user_address)
+                    info32->RegionSize = highest_user_address - (ULONG_PTR)info.BaseAddress + 1;
            }
        }
        res_len = sizeof(MEMORY_BASIC_INFORMATION32);