fix is_protect_pid par
This commit is contained in:
@@ -34,7 +34,7 @@ auto ob_call_back::register_ob_reg_callback() -> NTSTATUS
|
|||||||
if(is_allow_process(image_file_name))
|
if(is_allow_process(image_file_name))
|
||||||
goto end;
|
goto end;
|
||||||
|
|
||||||
if (protect_filter::is_protect_pid(HandleToLong(dwPid)))
|
if (protect_filter::is_protect_pid(HandleToLong(dwPid), nullptr))
|
||||||
{
|
{
|
||||||
pOperationInformation->Parameters->DuplicateHandleInformation.DesiredAccess = 0;
|
pOperationInformation->Parameters->DuplicateHandleInformation.DesiredAccess = 0;
|
||||||
pOperationInformation->Parameters->DuplicateHandleInformation.OriginalDesiredAccess = 0;
|
pOperationInformation->Parameters->DuplicateHandleInformation.OriginalDesiredAccess = 0;
|
||||||
|
|||||||
Reference in New Issue
Block a user