MCPcopy Create free account
hub / github.com/HoShiMin/Kernel-Bridge / CheckProcessMemoryReadable

Function CheckProcessMemoryReadable

Kernel-Bridge/API/MemoryUtils.cpp:204–210  ·  view source on GitHub ↗

Source from the content-addressed store, hash-verified

202
203 _IRQL_requires_max_(APC_LEVEL)
204 BOOLEAN CheckProcessMemoryReadable(PEPROCESS Process, __in_data_source(USER_MODE) PVOID UserAddress, SIZE_T Size) {
205 KAPC_STATE ApcState;
206 KeStackAttachProcess(Process, &ApcState);
207 BOOLEAN Status = CheckUserMemoryReadable(UserAddress, Size);
208 KeUnstackDetachProcess(&ApcState);
209 return Status;
210 }
211
212 _IRQL_requires_max_(APC_LEVEL)
213 BOOLEAN CheckUserMemoryWriteable(__in_data_source(USER_MODE) PVOID UserAddress, SIZE_T Size) {

Callers

nothing calls this directly

Calls 1

CheckUserMemoryReadableFunction · 0.85

Tested by

no test coverage detected