From 0b8acaac3165e9dd47155cacac78f78ca40f29f3 Mon Sep 17 00:00:00 2001 From: Mark Jansen Date: Sat, 11 Apr 2020 16:27:02 +0200 Subject: [PATCH] [AVRF] Suppress notifications for providers --- dll/ntdll/ldr/verifier.c | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/dll/ntdll/ldr/verifier.c b/dll/ntdll/ldr/verifier.c index a3626dbbf74..249d752140f 100644 --- a/dll/ntdll/ldr/verifier.c +++ b/dll/ntdll/ldr/verifier.c @@ -333,7 +333,7 @@ AVrfDllUnloadNotification(IN PLDR_DATA_TABLE_ENTRY LdrEntry) { PLIST_ENTRY Entry; - if (!(NtCurrentPeb()->NtGlobalFlag & FLG_APPLICATION_VERIFIER)) + if (!(NtCurrentPeb()->NtGlobalFlag & FLG_APPLICATION_VERIFIER) || !AVrfpInitialized) return; RtlEnterCriticalSection(&AVrfpVerifierLock); @@ -365,7 +365,7 @@ AVrfInternalHeapFreeNotification(PVOID AllocationBase, SIZE_T AllocationSize) { PLIST_ENTRY Entry; - if (!(NtCurrentPeb()->NtGlobalFlag & FLG_APPLICATION_VERIFIER)) + if (!(NtCurrentPeb()->NtGlobalFlag & FLG_APPLICATION_VERIFIER) || !AVrfpInitialized) return; RtlEnterCriticalSection(&AVrfpVerifierLock);