[NTOS:EX]

- Acquire ProcessLock before accessing a process's thread list in NtQuerySystemInformation/SystemProcessInformation. Patch by Volodymyr Shcherbyna.
CORE-12001 #resolve

svn path=/trunk/; revision=72873
This commit is contained in:
Thomas Faber 2016-10-01 09:03:47 +00:00
parent 10cdda5bf5
commit 531ee01590

View file

@ -812,6 +812,10 @@ QSI_DEF(SystemProcessInformation)
{
SpiCurrent = (PSYSTEM_PROCESS_INFORMATION) Current;
/* Lock the Process */
KeEnterCriticalRegion();
ExAcquirePushLockShared(&Process->ProcessLock);
if ((Process->ProcessExiting) &&
(Process->Pcb.Header.SignalState) &&
!(Process->ActiveThreads) &&
@ -821,6 +825,10 @@ QSI_DEF(SystemProcessInformation)
Process, Process->ImageFileName, Process->UniqueProcessId);
CurrentSize = 0;
ImageNameMaximumLength = 0;
/* Unlock the Process */
ExReleasePushLockShared(&Process->ProcessLock);
KeLeaveCriticalRegion();
goto Skip;
}
@ -955,6 +963,10 @@ QSI_DEF(SystemProcessInformation)
ProcessImageName = NULL;
}
/* Unlock the Process */
ExReleasePushLockShared(&Process->ProcessLock);
KeLeaveCriticalRegion();
/* Handle idle process entry */
Skip:
if (Process == PsIdleProcess) Process = NULL;